Does PolicyPak admin console need to be installed on Domain Controller (DC)?
No. The Netwrix PolicyPak admin console does NOT need to be installed on DCs.
Let's do a quick run-through of the components of PolicyPak and where they are installed:
Step 1 – PolicyPak Admin Console MSI: Install this on YOUR management station, usually Windows 10. As a rule of thumb, install this anywhere you have and use the GPMC regularly.
Step 2 – PolicyPak CSE MSI: Install this on the machines you want to manage using PolicyPak Software. Usually end-user computers, Citrix / TS machines, or anything that users actually log on to or use
Step 3 – PolicyPak pre-configured Paks: These are COPIED in one of three places:
- Locally to YOUR management station machine,
- To the PolicyPak Central Store Working with Others and using the Central Store
- A share Using Shares to Store Your Paks (Share-Based Storage).
Point 3 is needed for PolicyPak Application Settings Manager (PPASM) only.
So, nothing is ever needed to be installed on DCs. And nothing is ever required to be running on DCs.