W2K Schema Master in the DMZ?

["david singleton" <david_rh_singleton () hotmail com>]

The Windows 2000 Active Directory forest-wide FSMO (particularly the Schema 
Master) is commonly secured behind an additional locked door.  Since MS's 
white paper  
<http://www.microsoft.com/technet/treeview/default.asp?url=/TechNet/security/bestprac/bpent/sec3/ipsecloc.asp>. 
states that "70% of unauthorized access is done from inside a company.  It's 
important not to underestimate the enemy inside" shouldn't we be putting the 
Schema Master in the DMZ?

Thanks in advance.

Dave




_________________________________________________________________
MSN Photos is the easiest way to share and print your photos: 
http://photos.msn.com/support/worldwide.aspx

_______________________________________________
firewall-wizards mailing list
firewall-wizards () nfr com
http://list.nfr.com/mailman/listinfo/firewall-wizards