If other services are operated on a domain controller in addition to AD, this increases the number of potential attacks on these central infrastructure components due to additional possible vulnerabilities and misconfigurations. Such services may be misused inadvertently or wilfully in order to copy or change information without authorisation, for example.