Terminal Services on Domain Controller?

[donnatronious]

I have a windows 2000 domain controller that is also running an Mdaemon Email server with Groupware and Norton AV. I need too run Quickbooks Enterprise under terminal services. The server is handling 12 users right now. I am contemplating installing TS in App mode on this DC.

I understand the security implications of running all this stuff together and don't really want too hear anyone reccommend I not attempt this because it is bad form. I know it is.

I want too know if anyone has installed TS in app mode on their domain controller running similar services and I want too know if they ran into any difficulty. Did any programs on the machine start behaving badly?

If I attempt this and it fails miserably, what is the best backup strategy too attempt recovery of my DC? Will recovering from a ERD if the registry is previously dumped save me. What about the system state?

 

[TallyRich]

I'm in a similar situation with a DC already running TS. It works great, but the users have elevated privileges that I'd like to "clamp down." That is the only way that I've found that they are able to log in. The privileges appears to be the biggest issue.

The other issue of which you need to be aware is that in TS application mode all of your applications have to be installed via the add new programs option in control panel. That may mean that you have to reinstall some of the running applications.

Other than that you should be good to go and work very well. I've found that many applications work faster in TS App mode than running directly on the machine.