Windows Server 2003 Security: A Technical Reference

Physically Secure Domain Controllers

A copy of the domain's Active Directory resides on each domain controller, and therefore, the physical security of computers used as domain controllers should be planned and maintained. Although it's easy to insist that all domain controllers exist within the corporate data center, this is not possible in all organizations. Therefore, it's important to consider the possible different locations for domain controllers and establish physical security guidelines for each. For many deployments, domain controllers will be located at the main offices of an organization or at its large regional offices where there are established data centers. However, there are other situations where domain controllers may reside ...