Should the DNS and DHCP server be on the same machine

active-directorydhcpdomain-name-systemgroup-policywindows-server-2008

We are experiencing an issue with users not being mapped to their corresponding network drives during login. I verified that the logon script is correct, and it works if I run it manually so I suspect there is some kind of network issue.

When I run gpupdate, I get an error that states that:

Group Policy failed because of lack network connectivity to the domain controller

I can ping our DC server immediately after I get this error. I figured this was somehow related to the DNS and/or DHCP server. The DNS service is running on the DC and the DHCP service is running on a Pfsense system.

Should I move the DHCP server to the DC?

Best Answer

Should I move the DHCP server to the DC?

There's no reason to. In fact, it's best security practice not to run it on a DC. The only reason I ever set up a DHCP server on a DC is in SMB networks that don't have any other choice.