Yes. Putting DHCP on a DC (while common) provides permissions to the DHCP stack that could be potentially abused.
From: [email protected] [mailto:[email protected]] On Behalf Of Heaton, Joseph@Wildlife Sent: Wednesday, November 29, 2017 5:22 PM To: 'NT System Admin Issues Discussion list' Subject: [NTSysADM] DHCP role Is it still best practice to have DHCP NOT on a DC? I've been reading a bunch of stuff, but everything I'm reading refers to Server 2003 or older. Joe Heaton Information Technology Operations Branch Data and Technology Division CA Department of Fish and Wildlife 1700 9th Street, 3rd Floor Sacramento, CA 95811 Desk: 916-323-1284
