Windows Server® 2008 Security Resource Kit

Multi-Role Servers

Before we finish, a few words about multi-role servers is in order. Multi-role servers are servers that support more than one role. For example, a DNS server that is also an Active Directory Domain Controller is a multi-role server. In some cases, as in that one, multi-role servers are acceptable, and even encouraged. However, in general, multi-role servers degrade the security you can achieve and are not recommended. With a multi-role server, management becomes more complex because you have to account for how each role will behave in the presence of other roles, and you potentially have to work harder to keep the server updated. You may find that certain highly recommended security settings for one role do not work in the presence ...