Questions tagged [best-practices]

Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

351 questions
9
votes
3 answers

Distinguish Between Users and Service Accounts in Active Directory

Question Is there a "correct" / standard way to distinguish Service Accounts from User Accounts in AD? More Info In certain scenarios we have systems running under AD Credentials (i.e. under a Service Account). These Service Accounts are created in…
JohnLBevan
  • 1,214
  • 7
  • 22
  • 46
9
votes
1 answer

What are the best practices for service accounts?

We're running several services in our company using a shared domain account. Unfortunately, the credentials for this account are widely distributed and being used frequently for both service and non-service purposes. This has led to a situation…
9
votes
3 answers

Cisco ASA and multiple VLANs

I currently manage 6 Cisco ASA devices (2 pairs of 5510s and 1 pair of 5550s). They all work quite nicely and are stable so this is more of a best-practice advice question rather then "OMG it's broken help me fix it". My network is split into…
bart613
  • 548
  • 1
  • 6
  • 15
9
votes
6 answers

Daily/Weekly/Monthly/Annual Sysadmin Tasks

This should probably be community wiki. I'm trying to come up with a list of all the sysadmin tasks that we should be doing on a regular basis because I believe we're not doing enough at our company. The attitude around here is that fixing problems…
Scott
  • 1,173
  • 3
  • 13
  • 25
9
votes
7 answers

C:\ is for OS, D:\ is for Data?

"Back in the day" we always segregated our OS drives (in Windows) from our Data drives. In the Linux world, although I am much less familiar with it, I am aware that the wisdom dictates even more volumes defined and used in a best-practice…
Jeremy
  • 938
  • 2
  • 7
  • 18
9
votes
3 answers

What are some best practices when taking over IT at a new company?

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look for immediately? What are your MUST haves for a…
Robert Swisher
  • 1,147
  • 7
  • 14
8
votes
2 answers

How to plan an Active Directory domain rename without it killing me?

It's looking more and more like I'll have to rename my Active Directory domain. There is a well-known process for making this change, including some very good answers on Server Fault already (like this one). I understand you may think I want to…
Spencer
  • 197
  • 1
  • 9
8
votes
1 answer

What is the proper way to configure Active Directory and Domain Controllers when only a dynamic (not static) IPv6 prefix is available?

When neither provider-independent address space or an ISP assigned static prefix is available, and a delegated prefix (via DHCPv6) is the only option… What is the "best practice" for configuring Active Directory and Domain Controllers to support…
Corey
  • 2,031
  • 12
  • 39
  • 54
8
votes
1 answer

How to manage Nagios dependencies on big clusters?

I'm using quite a big nagios configuration (about 4000 services), without any dependencies. This results in a huge mess of notifications when something goes wrong. I try to look for best practices with Nagios Dependencies, but all I find on the web…
Falken
  • 1,702
  • 5
  • 18
  • 28
8
votes
1 answer

Best practice for Exchange 2010 HA topology considering 6 x Exchange licenses and TMG 2010

What would be best topology considering that: 6 x Exchange 2010 Standard Licenses 2 x Separate locations that are supposed to support redundancy in case of link problems 4 x Forefront TMG 2010 with Forefront Security and Forefront…
MadBoy
  • 3,725
  • 15
  • 63
  • 94
7
votes
2 answers

Transition away from Domain Admin only account

In our Windows environment, our Domain Admins only have one user account. This single user account is used across the board including running on a day to day workstation. In our transition away from this practice, we are looking for best practices…
Mark
  • 71
  • 1
7
votes
2 answers

GPO best practices : Security-Group Filtering Versus OU

Good afternoon everyone, I'm quite new to Active Directory stuff. After upgraded Functional level of our AD from 2003 to 2008 R2 (I need it to put fine-grained password policy), I then start to reorganized my OUs. I keep in mind that a good OU…
7
votes
3 answers

Is there already a recommended IPv6 Firewall setup?

I'd like to switch from private-IPv4-subnet-behind-NAT to IPv6, but of course I have no intention of exposing my users' workstations "unprotected" to the net. Some obvious points up-front: Allow access to provided services Deny access to…
David Schmitt
  • 2,185
  • 2
  • 15
  • 25
7
votes
2 answers

As an admin, what tools do you use to log what you do to your boxes?

I am more of a linux applications developer than an admin. Over time, I've built servers and maintained them, sometimes to offer services, mostly just to develop the applications I work on. Way back when I would create a file in my account to keep…
Jerry Asher
  • 238
  • 1
  • 7
7
votes
3 answers

How to give write permissions to multiple users?

I have a web server and I'm uploading files using an FTP client. Because of that the owner and the group of the file are taken from the user used during the upload. Now I have to make this file writable by the web server (apache/apache). One way…
Daniel Rikowski
  • 758
  • 4
  • 10
  • 19