Source: the time I grabbed a machine we were about to toss and made it a secondary domain controller for our site so we could nuke and pave our misbehaving Server 2012 DC.
(That other one was also a secondary DC - we just needed one on-site so we could prevent our T1 connection to another site from being the bottleneck.)
It can run as a domain controller in active directory as well (2016 functional level now supported)
Can confirm that it can do this fairly well.
Source: the time I grabbed a machine we were about to toss and made it a secondary domain controller for our site so we could nuke and pave our misbehaving Server 2012 DC.
(That other one was also a secondary DC - we just needed one on-site so we could prevent our T1 connection to another site from being the bottleneck.)