question

SARAALQADEERI-4192 avatar image
0 Votes"
SARAALQADEERI-4192 asked DaisyZhou-MSFT commented

Domain or workgroup

In general, which is more secure to have a server (web server or application server ...etc) in workgroup or to have a server joined into AD domain? and what will happen if one server joined in the domain get hacked is it going to affect all the other servers in that domain?**

windows-active-directory
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

DaisyZhou-MSFT avatar image
0 Votes"
DaisyZhou-MSFT answered DaisyZhou-MSFT commented

Hello @SARAALQADEERI-4192,

Thank you for posting here.

I think it depends on your requirements.

Here is my suggestion for your reference.

In general, which is more secure to have a server (web server or application server ...etc) in workgroup or to have a server joined into AD domain?
A: If the web server or application server do not need domain function, you can put it/them in workgroup and do not connect to Internet.

And what will happen if one server joined in the domain get hacked is it going to affect all the other servers in that domain?
A: Probably not, unless the domain administrator's password is stolen, it may affect other machines in the domain.

Here is a similar case for your reference.
Should Windows Web Servers be members of an Active Directory Domain
https://serverfault.com/questions/16773/should-windows-web-servers-be-members-of-an-active-directory-domain

Please note: Information posted in the given link is hosted by a third party. Microsoft does not guarantee the accuracy and effectiveness of information.


Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.


Best Regards,
Daisy Zhou


============================================
If the Answer is helpful, please click "Accept Answer" and upvote it.

· 2
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thank you that is very useful

0 Votes 0 ·

Hello @SARAALQADEERI-4192,
Thank you for your update and accepting my reply as answer. I am very glad that the information is helpful.

As always, if there is any question in future, we warmly welcome you to post in this forum again. We are happy to assist you!

Best Regards,
Daisy Zhou

0 Votes 0 ·
DSPatrick avatar image
0 Votes"
DSPatrick answered DSPatrick edited

If a public web service is being deployed probably isolating in a DMZ network would be recommended or better yet host it on Azure. There's really no advantage to having a public web server joined to domain.

--please don't forget to Accept as answer if the reply is helpful--


· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

thank you for your answer but it didnt answer my questions

0 Votes 0 ·