Network access control helps reduce cyber threats in two ways: role based access control and limiting the scope of malware. Role-based access control creates a safe context for every user to maintain their control over the server. Scope of malware is reduced because domain controllers provide two levels of auditing access to the server, and if want to manage your networks, check out this site to find the best resources for this.
Role-based access control also helps prevent data loss in two ways: protecting the data store on the Windows Server 2012 domain controllers from unauthorized changes, and securing disk access to the server and its services.
For information on roles, access rights, and role based access control, see aboutRole-BasedAccessControl.
Minimum system requirements
The following table lists the minimum system requirements for Windows Server 2012 domains:
Server Operating System CPU 1,024 megabytes of memory 512 megabytes of hard disk 15 gigabytes of video memory 2 gigabytes of sound memory 32-bit or 64-bit Microsoft Windows Server 2008 R2 Minimum Windows Server 2012
Windows Server 2012 R2 and Windows Server 2012 Minimum Minimum Operating System supported by server1 Operating System Windows Server 2008 R2 Windows Server 2012 Recommended CPU speed 1.5GHz or faster Memory (RAM) 512 MB (512 MB per domain controller) Direct I/O 1024 MB of memory per domain controller Hard Disk 8GB or higher, 64-bit (Only) File System NTFS NTFS for FAT 16-bit Supported Network Transports TCP/IP 1.0, TCP/IPv6, HTTP, HTTPS, TELNET, LVS Storage (I/O) FAT 16-bit supported on one or more domain controllers using Storage Spaces Direct and Standard Availability Groups with group policies, or for domain controllers running Windows Server 2012 R2 and Windows Server 2012 Standard Edition. Compatible versions of Windows Server 2008 R2 Supported by all domains (Windows Server 2008 R2) Supported by all domains (Windows Server 2012) Features Web Server Extensions for Windows Server 2008 R2, including Active Directory Schema Extensions, Directory Services Restore Mode, DCOM, and AD DS for Windows Server 2008 R2, Windows Server 2012, and Windows Server 2012 R2 Full operating system for Active Directory, available for download on the Microsoft Download Center. The OS also includes required operating system services, such as Active Directory Domain Services, Exchange Server, and Remote Desktop Services. Microsoft SharePoint Server 2010 The maximum I/O bandwidth to a domain controller is 1.2 gigabytes per second. For more information about I/O bandwidth, see System Requirements for Domain Controller Clients.
For more information about SharePoint Server 2010, see About the following: Microsoft SharePoint Server 2010.
Applies to: Windows Server 2012, Windows Server 2012 R2, Windows Server 2012 Standard Edition, Windows Server 2012 Datacenter Edition
Distributed Log File System (DLF) authentication
By default, all Windows Server 2012 domain controllers support domain-joined workloads with a mix of desktop, client, and server roles.
You can configure DLF authentication on server1, server2, server3, and server4, but not on domain controllers. (DLF authentication is not enabled on the domain controllers).
The following sections provide step-by-step instructions to enable DLF authentication.
Installing Active Directory Domain Services (AD DS)
The following sections describe how to install Active Directory Domain Services (AD DS).
To enable AD DS on all domain controllers.