# Choose a Windows Admin Center gateway location

> Should administrators use a local client installation or a designated gateway server?

- Canonical URL: https://update.dsesecurity.com/updates/dse-20260908-231-choose-a-windows-admin-center-gateway-location/
- Publisher: Detection Systems & Engineering (DSE Security)
- Author: DSE Security Editorial Team
- Published: 2026-09-08T18:13:20+00:00
- Modified: 2026-09-08T18:29:34+00:00
- Last reviewed by DSE: 2026-09-08
- Resource type: Guide
- DSE priority: Information
- Topics: Business Continuity, IT
- Reading time: 1 minutes

## What you need to know

Should administrators use a local client installation or a designated gateway server?

## Potentially affected

Teams choosing where to install Windows Admin Center for server management.

## DSE recommendation

Draw the browser-to-gateway and gateway-to-managed-server paths for the proposed location.

## Article

## Source facts

Microsoft describes a local Windows client installation for small-scale or ad hoc use and a designated gateway server for larger-scale access from client browsers. Microsoft does not recommend managing the gateway’s own server locally through that installation. Installing Windows Admin Center on a domain controller is unsupported. [Microsoft Learn](https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/plan/installation-options).

## Applicability

Identify the administrator population, intended managed servers, and available management endpoints before selecting the installation mode. Confirm the supported operating system and current gateway-version requirements. Keep this placement decision separate from assigning users to gateway roles.

## DSE recommendation

Draw the browser-to-gateway and gateway-to-managed-server paths for the proposed location. Select a designated owner for gateway updates, certificates, and recovery. For a local-client trial, document who can continue management when that workstation is unavailable. Exclude domain controllers from the placement candidates and use a separate management route for the server hosting the gateway.

## Verification

From an intended administrator device, connect through the selected gateway and open a representative managed server. Confirm that the recorded gateway host is the endpoint actually serving the session. Review the loss-of-gateway scenario with the operations owner and verify that its alternate management route is usable.

## Official references

[Microsoft Learn: What type of installation is right for you](https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/plan/installation-options). Source reviewed September 8, 2026.

## Primary reference

- Name: What type of installation is right for you
- Authority: Microsoft Learn
- URL: https://learn.microsoft.com/en-us/windows-server/manage/windows-admin-center/plan/installation-options
- Source publication date: Not stated by the source

## Citation and use

Preferred citation: “Choose a Windows Admin Center gateway location,” DSE Security, https://update.dsesecurity.com/updates/dse-20260908-231-choose-a-windows-admin-center-gateway-location/
Publishing principles: https://update.dsesecurity.com/updates/dse-updates-editorial-methodology/
Usage and citation policy: https://update.dsesecurity.com/usage/
Copyright © 2026 Detection Systems & Engineering. All rights reserved.