I think we're all circling around the idea that while it's not wrong by
definition, it's certainly a sensitive part of the infrastructure, so
"handle with care."
A good approach is to ask yourself: "do I need this particular piece of
software on a DC at all?" AV was raised as an example. If no
I agree with Idan Test test test test if you have to do it.
As a general going in rule I am of the opinion "No agents" on DCs.
Then if someone wants it bad enough they will either
A. Argue with me
B. Take it to management
A is the best if they have a good story. Generally, the story isn't
