---
id: 7549
title: "What Should You Install on Your Domain Controllers?"
source_domain: semperis.com
source_url: "https://www.semperis.com/blog/what-should-you-install-on-your-domain-controllers/"
published_at: "2026-09-01T18:07:12Z"
tags: ["active-directory", "attack-surface", "windows-server", "best-practices", "hardening", "domain-controller"]
phying_url: "https://phying.com/item/7549"
lang: en
---

# What Should You Install on Your Domain Controllers?

## Summary

A domain controller should do one thing: control the domain. Why ADDS belongs on a DC and which roles, tools, and apps to keep off it to shrink the attack surface.

## Intelligence Metadata

- **Sources:** semperis.com
- **Published:** 2026-09-01T18:07:12Z
- **Original:** https://www.semperis.com/blog/what-should-you-install-on-your-domain-controllers/
- **Phying News:** https://phying.com/item/7549