The concern is that your domain policies could get in the way of the server doing its job. e.g., manditory patches, reboots, etc.
So, just to play it safe, and keep cisco TAC support on your side, take it out of the domain. Otherwise, you're on your own.
