Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We are a smallish educational network (about 70 clients) with a single server running Windows Server 2008 Enterprise, functioning as both domain controller and file server.

The educational pricing for Microsoft Forefront Endpoint Protection 2010 is irresistible as a managed anti-malware solution, but it requires System Center Configuration Manager 2007.

I know best practice is not to run System Center Configuration Manager on a domain controller, but it's the only server I have to work with.

Will installing SCCM on a domain controller cause problems? What conflicts might I need to take into account when planning deployment?

share|improve this question
up vote 1 down vote accepted

You can install them all on the same server, but this will really load it down. SCCM + FFEP requires SQL (SSDS, SSRS, SSAS, and SSIS). I'd recommend a minimum of 8GB of RAM (preferably 12+), 4+ cores, some speedy disks. These are all pretty heavyweight products.

share|improve this answer

I had a domain controller (with DNS and DHCP, nothing else), and installed SCCM on it.. I wont ever do that mistake again.

SCCM is -extremely- resource hungry. You can have 10 clients, and it will still behave like you have 10.000 clients.

I'd strongly consider getting another server for this.

share|improve this answer

We have branch nodes that have only one server, and we use them as both as a read-only domain controller and SCCM site server. They have 8GB of RAM and dual core Xeon processors. The servers run just fine in that configuration. While your loading will be greater (due to full-access domain controller and FFEP), the low number of clients should allow for acceptable performance.

Just be sure to make a backup of the domain before you do it (and plan for an outage, since I think you have to do a few reboots).

share|improve this answer
Thanks for sharing your experience. We're running 4GB of RAM on a 3-year-old domain controller, so I've decided against SCCM. – Brent D Mar 8 '11 at 14:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.