Questions tagged [best-practices]

Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

351 questions
4
votes
2 answers

AD | Prevent admins from changing passwords to the same thing

I have an interesting security problem: Admins with ad access have been changing their password to the same thing, and breaching the company security policy. User side, standard AD complicated password policy is in place (expires after x days, have…
4
votes
0 answers

What is the best practise to autostart unprivileged lxc containers on Ubuntu 14.04 64bit?

The current implementation of the LXC technology deals nicely with an issue of starting the privileged containers upon system start.. Users of the unprivileged containers (which arguably promise better security) don't get any working out-of-the-box…
Adam Ryczkowski
  • 720
  • 1
  • 9
  • 29
4
votes
2 answers

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to "computer"-local groups. Let's assume i got a…
Matthias Güntert
  • 2,438
  • 12
  • 39
  • 59
4
votes
3 answers

Keeping Track of Enterprise Desktops

Part of my job is to make sure that for computers in a specific OU, whats Actually in use = whats listed in AD = whats listed in SCCM. This is for an environment with 250k PCs, but i specifically care about one department's 70k. Its pretty easy…
mcudm001
  • 41
  • 1
4
votes
1 answer

Using Public IP addresses for Private Network

I have a network that uses the 192.192.192.x network address for their private network. It looks like publicly those are IP addresses that are assigned in Taiwan. I don't think they do too much business there, so it shouldn't "impact" their work. My…
Nixphoe
  • 4,584
  • 7
  • 34
  • 52
4
votes
1 answer

Active Directory Split-Zone vs SubDomain Domain Name

Note - I know there are a ton of questions around AD Naming. I do not believe though that this is a duplicate question. If it is please link me to a relevant one :). We are implementing AD. Our big issue is the domain name. We already have decided…
4
votes
2 answers

Standard Firewall and Network Change Testing Procedure

I am looking for a standard that advises on the best practice for testing of the following situations: Network Changes Firewall Changes Does any standard exist? If so, please note where I can find it. If not, please advise on your own best…
Kyle Rosendo
  • 149
  • 1
  • 2
  • 9
4
votes
1 answer

A separate user for each task?

I just got a VPS sver the other day, I'm new to server administration, but not that new to Ubuntu (11.04). I use it in my living room as the HTPC, and I had a previous VPS that I used on and off for a team speak server. This one I'm setting up for…
Mark Tomlin
  • 650
  • 3
  • 10
  • 23
4
votes
4 answers

Is there a good layout convention for cron files?

I'm currently confronted with a cron file that contains a dozen different applications' tasks--some have only one, some have lots. I'm trying to figure out a good way to organize and document these processes. Are there any conventions out there that…
abeger
  • 471
  • 1
  • 4
  • 6
4
votes
3 answers

Ranges for Multiple DHCP Server: Better to overlap or separate? wireless vs ethernet clients?

I know there are mixed feelings about running multiple DHCP servers on one LAN, but I'm wondering about the best way to set their ranges. In my case, I have a router which performs DHCP and also my Ubuntu Server which I use for FOG ghosting (among…
neildaemond
  • 189
  • 7
4
votes
6 answers

Is it better to have four average servers or one awesome server

Ok, I want to have one high spec server (two quad core processors, lots of ram, raid 5, Server 2008 R2 etc), my colleague wants to spend the same money on four average pre-owned servers (Dual core Xeon, raid 2,4GB Ram, Server 2003 etc). We are…
JMK
  • 778
  • 2
  • 7
  • 19
4
votes
3 answers

Should redundant servers have exactly the same configuration, or slightly different?

If you provide a service on two servers to ensure high-availability, is it better to configure them in exactly the same way, of instead should you introduce slight differences to prevent "freak configuration" errors? We host a Django-based website…
Jan Fabry
  • 926
  • 1
  • 11
  • 18
4
votes
1 answer

Acceptable level of hard write errors on tape?

What is an acceptable level of hard write errors on tape? Specifically, what is acceptable on HP LTO-2 media? Is it a hard number of errors, a ratio of hours in use to errors, or something else entirely? Further background We are using a MSL6000…
CC.
  • 1,196
  • 1
  • 10
  • 22
4
votes
3 answers

Ramifications of rebooting a file server when files are open

This may prove to be a stupid question, but I've scoured in internet and found nothing to that gives me a concrete answer. I'm curious as to potential consequences of a file server being rebooted or crashing when users have files open. Now common…
DKNUCKLES
  • 4,028
  • 9
  • 47
  • 60
4
votes
1 answer

Merging two companies: Best practice?

Situation: Company A purchased Company B. Offices are 40 miles apart. There are about 10 employees in each office. We want to have everyone be able to access all network resources independent of location. Company A - Windows 2008 Server domain…
M6rk
  • 63
  • 5