At the moment, we have 1 machine running IIS, SQL server, Active Directory, some kind of Quickbooks service..., DHCP, DNS, and VPN server. It's... precarious. There are about 10 people inside the office, and 30 that hit the web server once in a while. I'm trying to get 2 more boxes, or at least one more, to split this stuff out onto.
I'm thinking something like:
- Web/App stuff
- AD-1, DNS
- AD-2
Where does DHCP go? I've been reading through all the Active Directory questions here and, some places say, DHCP on AD machine is bad security idea while others talk about all the benefits of AD,DNS, and DHCP talking to each other (on the same machine).
VPN?