0

I have upgraded our Active Directory from Win2008 R2 to Win2012 R2 in preparation for an integration with Azure Active Directory. I know the integration can be done with Win2008 R2, but I figured there will be less problems if we use the latest version of Active Directory. Right now we only have a single on-premises domain controller, so it has the FSMO-roles, and the functional level of both the forest and the domain are upgraded to Win2012 R2.

I looked at what else is needed on-premises, and according to the prerequisites here, I'll need the Active Directory Federation Services: http://technet.microsoft.com/en-US/library/jj151786

"Install the AD FS role service on a Windows Server 2012 or Windows Server 2012 R2 server."

My question is; Can I install and use Federation Services on the domain controller, or do I need to have a separate domain member server and run the AD FS there instead?

migrated from superuser.com Jul 29 '14 at 21:18

This question came from our site for computer enthusiasts and power users.

0

Can I install and use Federation Services on the domain controller, or do I need to have a separate domain member server and run the AD FS there instead?

You would be better off running ADFS on a seperate server. running other services on a Domain Controller leads to headaches upgrading/migrating in the future.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy