TRUE or FALSE: AD sync needs to be installed on a DC?

Active Directory (AD) synchronization, often referred to as AD Sync, does not necessarily need to be installed on a Domain Controller (DC). This service can be set up on a non-DC server, which allows administrators greater flexibility in managing their sync configurations and resources. By installing AD Sync on a different server, it does not impose additional load on the DC, which is especially beneficial in larger environments where performance and resource allocation are critical.

Furthermore, AD Sync is capable of connecting to multiple domains and can be managed centrally without needing to be on a DC itself. This arrangement facilitates easier management and updates, ensuring that AD objects are properly synchronized with the relevant systems, regardless of where the sync service is installed.

To summarize, it is entirely feasible and often practical to install AD Sync outside of a Domain Controller, supporting the assertion that it does not require installation on a DC.