Device Services and SEG domain-joined?

[PaulBrownPaulBr]

When we installed Workspace ONE years ago, the advice was to have the DS servers and the SEG servers installed in a workgroup, but it was okay to have the Console and ENS servers joined into the domain. Is this still current best practice? Can DS and SEG be in the domain now? What are the ramifications of doing that? If not in the same domain, could these machines perhaps be in a separate domain/forest (for better administrative oversight)? If anyone has references to installation documents that discuss this, please post them here. I checked and did not find that particular part of the installation process in the latest installation docs.

Thanks.

[LukeDC]

Hi Paul,

There should be no issue with them being in the domain. The SEG and DS servers usually sit in the DMZ and most best practices say your servers in the DMZ should not be domain joined. But it is not going to limit you in any way.

[chengtmskcc]

I echo Luke's reply and had my SEG/DS joined to the domain while they were on the DMZ network.

Just make sure you don't have both SEG and DS on the same server.

[StevenLEMILLIER]

I can confirm you'll have no issue joining your DS and SEG to a domain. This domain can be the same for all your WS1 servers, or a DMZ dedicated one.