Does it matter much if the Terminal Server also serves the role of
Secondary Domain Controller? We only have 1-2 users connecting once
every three months or so.
I don't see why not, but I wouldn't recommend it.
It also depends on who is logging on to your system, and what their
trust level is to you. I mean, if it's your GM, it's unlikely he's
going to steal corporate data. Then you just have to worry about him
running something like "dcpromo" and removing active directory!
You REALLY had better make sure that you've locked down the security of
the terminal server though, so that they can not do anything except what
they need to do. Lock them out from all menus, folders, files, security
settings, EVERYTHING, that you don't want them to access.
If they gain access to something important, it could bring down your
network.
bill tkach
