|
Posted by Eduard Koller [MSFT] on June 14, 2005, 4:23 pm
If you were Registered and logged in, you could reply and use other advanced thread options
Yes, you can deploy a CA on a DC, but you should probably consider following
the suggestions presented in this document:
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
--
Eduard Koller[MS]
This posting is provided "AS IS" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
>I want to setup an internal CA to deploy 4 certificates to our users (even
> though our total user count in this company is 5000). We do not have any
> major plans to deploy additional certs for others.
>
> Question:
> Can i just install CA on a domain controller? MS' best best practice is
> to
> use a 2 tier/3 tier method and NOT INSTALL CA on a DC. But in our
> situation,
> we just need it to do a fast deployment. Deploying CA on 3 servers just
> dont' justify the cost.
>
> Let me know what the drawback is by installing it on a domain controller.
| 
XML site map