Server security

Question

Hi,
Would it have many other problem (in security), if Windows server having active directory, is directly linked to outside internet? How to make it better on the server?

Answer 1

Hello @Peter_1985 ,

Thank you for posting here.

Based on my understanding, AD domain is a security boundary. We suggest not to expose AD to the Internet, which may cause many security problems.

Here is a similar case we can refer to.

Should I expose my Active Directory to the public Internet for remote users?
https://serverfault.com/questions/573681/should-i-expose-my-active-directory-to-the-public-internet-for-remote-users/573721

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

having active directory, is directly linked to outside internet?

What exactly is meant here? Active directory generally would not function across internet.

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

No, I mean dedicated windows server having IP open to outside internet. Would it be easy to be attacked if Active directory is running within the server?

Answer 4

dedicated windows server having IP open to outside internet. Would it be easy to be attacked

Much easier, yes.

Active directory would not function across the internet. Multi-homing a domain controller will always cause no end to grief for active directory DNS

--please don't forget to Accept as answer if the reply is helpful--

Answer 5

Any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--