Deploying AD DS DCs on Server Core
Windows Server 2012 has an installation option called Server Core that allows the operating system to be deployed with only those services that are absolutely required for the role that the server holds. For DCs, this includes only those services that are needed for a DC to operate. Server Core is configured to run at a command prompt, without a graphical user interface (GUI) to further reduce the security profile of the box.
Deploying dedicated DCs using Server Core is ideal in many situations where security is a strong requirement. By doing so, only the necessary functionality is deployed, and no auxiliary services are required.
Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
