Luckily, every new version of Windows Server is built to be more secure by default. That said, it is common to have several (or sometimes hundreds) of different roles on the network server as well as multiple sets of file servers, web servers, database servers, etc.