Microsoft Ad Domain Name Best Practices. Summary 1 Start with a minimum number of Domain Controllers and gradually increase the number based on workload. The reason is because you cant purchase an SSL certificate for an unregistered domain or a domain that isnt registered to you.
After you install AD DS Best Practices Analyzer on the domain controllers that are running Windows Server 2008 R2 Best Practices Analyzer scans the AD DS server role and reports best practice violations. Implementing Secure Administrative Hosts. 2 Always ensure the physical security of your Domain Controllers.
Maintaining a More Secure Environment.
A Windows domain is a form of a computer network in which all user accounts computers printers and other security principals are registered with a central database located on one or more clusters of central computers known as domain controllersAuthentication takes place on domain controllers. Split DNS is when you have two separate DNS servers managing the exact same DNS Forward Lookup Zone increasing the administrative burden. Your Active Directory DNS domain should be based upon a registered domain you own. So register a public DNS name so you own it.