Active Directory and Group Policy (Windows Server 2012) best practices supposed do in a office Environment.

Dear Experts,

I would like to hear from all you about the implementation concept and best practices should be practised in an Office Environment - to expect best productivity, security and flexibility with in the department.

Please advice and share me the knowledge which you feels best. Thank you guys.

Shamil MohamedIT Infrastructure Engineer/IT Systems ManagerAsked:
Who is Participating?
Aaron TomoskySD-WAN SimplifiedCommented:
It will work with a single DC. The question is what happens when a switch or host goes down. You know you infrastructure and what is safe better than I do.
Cliff GaliherCommented:
If there was one "right" way to do the things you are asking about then there would be no settings to change our group policies. Entire books have been written about the subjects you've brought up. It is simply impossible to condense that knowledge into a response here. And the authors' out those books would black ball me for it.
Shamil MohamedIT Infrastructure Engineer/IT Systems ManagerAuthor Commented:
Haha... Thank you Cliff,

Then could i come back with one by one..??
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

Aaron TomoskySD-WAN SimplifiedCommented:
1. Use (any subdomain of a top level domain) as your domain name. You don't want to change this later it's a huge pita.

2. Have at least two domain controllers, and at least one of them offsite and/or in the cloud. Don't back them up its bad to restore them.
Shamil MohamedIT Infrastructure Engineer/IT Systems ManagerAuthor Commented:
Dear Aaron,

Thank you for you suggestion. As i tried to replicate a additional domain controller at offsite leads to terrible disaster once due to improper syncing, dfs error.. I dont know.. whole thing went crap.

After spending some nights at office made things back into track again.

One more thing i am still in very doubtful that implementing domain controller.

Is it wise to deploy domain controller in virtual. Considering that domain controller hosting into baremetal seems not economic.

Please advice me.

Thank you.
Aaron TomoskySD-WAN SimplifiedCommented:
Virtual is good, just make sure that at least one DC stays up if anything fails. So don't put them both on the same shared storage or host.
Shamil MohamedIT Infrastructure Engineer/IT Systems ManagerAuthor Commented:
is it ok if I put one dc in one cluster and another secondary dc in second cluster. but second cluster run in 2 different subnet ( one subnet is same as first cluster).

thank you
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.