Posted 02 February 2009 - 08:07 PM
It's a trivial matter to remove the domain controller role, but it has some decidedly non-trivial effects.
Yes - it's more complex, but for a reason.
If the domain is properly set up and configured, and the necessary tools installed, it's very easy for an admin to perform actions on the various members remotely.
It's also easy to botch things horribly.
The biggest risk is hosing security so badly that people lose access to their files until you have to pay someone else to come in and unscrew it.
There is a lot of good that comes from a formal domain - and that's why I recommend slogging through that book.
What you *don't* want to do is get rid of the domain , then decide that you needed it after all.