Windows Server® 2012 Unleashed

Best Practices

The following are best practices from this chapter:

• Fully understand the structure of AD DS before designing.

• Implement fine-grained password policies and the Active Directory Recycle Bin to reduce the need for additional domains.

• Secure any external namespace chosen by registering it so that it cannot be used anywhere on the Internet.

• Start a domain design by considering the single-domain model first.

• Consider using multiple domains for specific reasons only.

• Consider using the federated-forest design model when uniting two disparate AD DS structures.

• Control and optimize replication traffic by using sites.

• Upgrade any down-level clients to reduce administration and maintenance.

• Use domain rename sparingly, ...