What Should You Install on Your Domain Controllers?
semperis.com | blog | #active-directory | #attack-surface | #windows-server | #best-practices | #hardening | #domain-controller
Summary
A domain controller should do one thing: control the domain. Why ADDS belongs on a DC and which roles, tools, and apps to keep off it to shrink the attack surface.
- Published
- Collected
--- id: 7549 title: "What Should You Install on Your Domain Controllers?" source_domain: semperis.com source_url: "https://www.semperis.com/blog/what-should-you-install-on-your-domain-controllers/" published_at: "2026-09-01T18:07:12Z" tags: ["active-directory", "attack-surface", "windows-server", "best-practices", "hardening", "domain-controller"] phying_url: "https://phying.com/item/7549" lang: en --- # What Should You Install on Your Domain Controllers? ## Summary A domain controller should do one thing: control the domain. Why ADDS belongs on a DC and which roles, tools, and apps to keep off it to shrink the attack surface. ## Intelligence Metadata - **Sources:** semperis.com - **Published:** 2026-09-01T18:07:12Z - **Original:** https://www.semperis.com/blog/what-should-you-install-on-your-domain-controllers/ - **Phying News:** https://phying.com/item/7549