Views please on installing the above on Domain Controllers and Security implications. Especially with a view to down-level clients.