ADS Security Model The ADS security model is divided into three distinct realms. The first security realm encompasses the initial stages of the bare metal deployment in which DHCP and PXE are being used initially. The DHCP and PXE phases are not authenticated and because of the design of those protocols, Microsoft recommends that the deployment network interface reside on a dedicated management network.