Is isolating domain controllers on dedicated VLAN pointless?

Does it increase security in any way when all the domain joined systems and any non-joined system that needs to be joined to the domain still needs to be able to reach the domain controllers and have SMB access to SYSVOL etc..?