It’s not supported, so don’t even think about it.
If you don’t believe me, then believe the Release Notes. You can find them at:
Hopefully, it never will be supported and we can put this “network firewall on a DC” stuff to rest.
Windows Server 2008 and Windows Server 2008 R2 have fantastic host-based firewalls built right in. There’s no need to put it on a DC.
Thomas W Shinder, M.D., MCSE
Sr. Consultant / Technical Writer