My earlier comments were related to the CM being a domain *controller*. Like commsguy, we have seen and placed CM's into the domain and haven't seen any significant issues. However, the recommendation from TAC is not to place the CM's into domains, but have them exist in a workgroup, so that is our first preference and strong recommendation to clients unless they have a compelling reason to put them into a domain. So far, I haven't had anyone come up with a very compelling reason to do so.