topic Re: Installing User-ID Agent on Domain Controller in General Topics

Installing User-ID Agent on Domain Controller

Victor.Newsom — Mon, 04 Mar 2019 04:16:07 GMT

Has anyone ran into any issues when deciding to install the user-id agent on a domain controller in an organization with about 6000 users.

Re: Installing User-ID Agent on Domain Controller

Mick_Ball — Mon, 04 Mar 2019 12:38:07 GMT

Victor, Hi.

we have approx double that ammount and felt best advised to keep the agent away from the DC.

others of course prefer to install on the DC's to reduce traffic.

even if our user count was 1k or so we would probably still keep the agents seperate as doing any work on a DC involves a mind blowing ammount of change forms and time.

by keeping the agents seperate we can modify as and when we like.

however... i can see no reason why your DC's would not cope, but if they are currently running at 75% then perhaps not...

you do of course have the option of using local agents on the Palo.

so... yes we had issues but probably not the ones you were thinking of...

Re: Installing User-ID Agent on Domain Controller

OtakarKlier — Mon, 04 Mar 2019 17:25:33 GMT

Hello,

There are also policy and compliance requirements to take into consideration. For us we were not allowed to do this so we have a utility server just for this purpose.

Just some thoughts.

Re: Installing User-ID Agent on Domain Controller

scottoliver — Tue, 05 Mar 2019 00:25:12 GMT

I would put it on a stand alone server. Let your DC be a DC no need to introduce an additional point of failure on it.

Re: Installing User-ID Agent on Domain Controller

Victor.Newsom — Tue, 05 Mar 2019 22:04:15 GMT

Thanks for responding

Re: Installing User-ID Agent on Domain Controller

Victor.Newsom — Tue, 05 Mar 2019 22:04:32 GMT

Thanks for the comment