Best Practices

Table of contents: Don’t put DHCP on Your Domain Controller Use DHCP Failover Central vs Distributed DHCP Server Avoid static IP assignments and use DHCP reservations Exclude IPs from the DHCP scope Learn PowerShell DHCP Commands Subnetting and benefits of network segmentation DHCP Lease Duration Tips Use IP conflict detection only when it is needed … Read more

This is the ultimate guide to Windows audit and security policy settings.  In this guide, I will share my tips for audit policy settings, password and account policy settings, monitoring events, benchmarks, and much more.  Table of contents: What is Windowing Auditing Use The Advanced Audit Policy Configuration Configure Audit Policy for Active Directory  Configure … Read more

This is the most comprehensive list of DNS best practices and tips on the planet. In this guide, I’ll share my best practices for DNS security, design, performance, and much more. Table of contents: Have at least Two Internal DNS servers Use Active Directory Integrated Zones Best DNS Order on Domain Controllers Domain-joined Computers Should … Read more

Table of contents: Stop adding accounts to the Domain Admins Group Use at least two accounts Secure the domain administrator account Disable the local administrator account (on all computers) Use Laps Use a secure admin workstation (SAW) Enable audit policy settings with group policy Monitor for signs of compromise Password complexity sucks (use passphrases) Use … Read more

This is the most comprehensive list of Active Directory Management Tips online. In this article I will share my tips on, design, naming conventions, automation, AD cleanup, monitoring, checking Active Directory Health and much more. Check it out: 1. Get Your Active Directory Organized If you don’t have good Active Directory organization unit (OU) design … Read more