Hiding DC's from Browse

[buddafish]

Hello All -

I was wondering if anybody hides their DC's from the browse list? Any reason not to? I was thinking that adding some security by obscurity for the DC's wouldn't be such a bad idea.

Thoughts on this?

Thanks!

 

[itsp1965]

Part of a DC's function is to "advertise" its services on the domain. Usually this entails participating in a browse list. Although I understand your need to for security, there are other ways to provide domain security

 

[kmcferrin]

Hiding them from a browse list does exactly zero to secure the network. You can still get a list of domain controllers from any PC that is logged onto the network. You might be hiding it from the normal users on your network, but you certainly won't be hiding it from anyone who wants to hurt your network. So why go through the effort?