ADFS on domain controller (8gb ram)

[Guest ZFarnworth]

Hello,

 

At home I’ve got a domain controller and ADFS installed with azure ad connect, I currently only have 8gb ram installed. I use ADFS for authentication between office 365 and I’ve got 15 people who will need to sign in every now and again.

 

Is it ok running on 8gb ram?

[sister_annex]

8Gb should be fine for such a low number of users however; it is not recommended practice to install ADFS on a DC: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc778681(v=ws.10)?redirectedfrom=MSDN#account-store-requirements

 

However, If you're running AADConnect you should not really need ADFS and in most cases now, MS are recommending AADConnect over ADFS due to other features that are available. https://docs.microsoft.com/en-us/microsoft-365/education/deploy/aad-connect-and-adfs

[Guest ZFarnworth]

8Gb should be fine for such a low number of users however; it is not recommended practice to install ADFS on a DC: https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc778681(v=ws.10)?redirectedfrom=MSDN#account-store-requirements

 

However, If you're running AADConnect you should not really need ADFS and in most cases now, MS are recommending AADConnect over ADFS due to other features that are available. https://docs.microsoft.com/en-us/microsoft-365/education/deploy/aad-connect-and-adfs

 

Yeah I’ve used all the other features but password reset with office 365 doesn’t work due to licenses and I just don’t want to pay for that, so ADFS is a better solution for my needs.

 

 

Thank you

[Jcx500]

I would move adfs off your dc if your adfs is public facing

[Guest ZFarnworth]

I would move adfs off your dc if your adfs is public facing

As of this morning I moved ADFS off my dc and migrated users over to okta with the directory tool. So no more ADFS.

 

Thanks all.