Internet access in domain controller server

Question

As per security protocols we have been asked to block internet access on our domain controller server. Our domain controller server has Active directory domain services and DNS server roles setup in it.

Kindly let me know if there would be any impact if we disable internet on the domain controller server.

Answer 1

Hi @Avinash Yadav ,

this is a good approach to secure critical service like domain controllers.

The two impact you can occurred:

• If the IP of domain controller is used as DNS resolver on client computer, client can be impacted to navigate on internet, because the local DNS server ( domain controller in your case) need to forward DNS request to external DNS server.
• If you don't have a WSUS server ,and the domain controllers download update from Microsoft download site, windows update can be impacted

Please don't forget to mark helpful answer as accepted

Answer 2

Hello there,

A domain controller needs a VPN connection , when you have a remote site to ensure authentication or replicate with local domain controller. It's not recommended to expose a domain controller on internet.

Securing Domain Controllers Against Attack https://learn.microsoft.com/en-us/windows-server/identity/ad-ds/plan/security-best-practices/securing-domain-controllers-against-attack

Similar discussion here https://learn.microsoft.com/en-us/answers/questions/958377/impact-of-removing-internet-explore-in-domain-cont

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer--