What you need to know
Should administrators use a local client installation or a designated gateway server?
Potentially affected
Teams choosing where to install Windows Admin Center for server management.
DSE recommendation
Draw the browser-to-gateway and gateway-to-managed-server paths for the proposed location.
Source facts
Microsoft describes a local Windows client installation for small-scale or ad hoc use and a designated gateway server for larger-scale access from client browsers. Microsoft does not recommend managing the gateway’s own server locally through that installation. Installing Windows Admin Center on a domain controller is unsupported. Microsoft Learn.
Applicability
Identify the administrator population, intended managed servers, and available management endpoints before selecting the installation mode. Confirm the supported operating system and current gateway-version requirements. Keep this placement decision separate from assigning users to gateway roles.
DSE recommendation
Draw the browser-to-gateway and gateway-to-managed-server paths for the proposed location. Select a designated owner for gateway updates, certificates, and recovery. For a local-client trial, document who can continue management when that workstation is unavailable. Exclude domain controllers from the placement candidates and use a separate management route for the server hosting the gateway.
Verification
From an intended administrator device, connect through the selected gateway and open a representative managed server. Confirm that the recorded gateway host is the endpoint actually serving the session. Review the loss-of-gateway scenario with the operations owner and verify that its alternate management route is usable.
Official references
Microsoft Learn: What type of installation is right for you. Source reviewed September 8, 2026.
Review the official source
What type of installation is right for you · Verified September 8, 2026
Need help applying this guidance safely?
DSE can help confirm applicability, protect service continuity, and validate the result across physical security and IT systems.
Talk with DSE