Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.
Questions tagged [best-practices]
351 questions
4
votes
2 answers
On Windows 2003 Server as File Server what it is better creating groups by directory or by profile?
I have a file server with 20 shared folders one for each department and their emploees have write permission through a AD group with same name of that folder.
The thing is some people have to write files on others department folders so they have…

Santiago
- 254
- 3
- 10
4
votes
1 answer
Best Practice: iDRAC & NIC Selection
I am setting up a new Dell server with iDRAC 6 Express.
My options for the NIC are:
1) Shared
2) Shared with failover to LOM2
3) Shared with failover to all LOMs
The server has 4x LOMs.
My questions are thusly:
-What is best practice for setting…

Josh Brower
- 1,669
- 3
- 18
- 29
4
votes
3 answers
New Server hardware verification tests
Is there any kind of best practice when it comes to verifying the hardware of a new server, before putting it into production?
For instance, running it through the manufacturer's hardware test, or running memtest on it for x amount of hours?
-Josh

Josh Brower
- 1,669
- 3
- 18
- 29
3
votes
0 answers
ZFS3 Lost Resilience. Is Read-only Safer than Letting Users Carry on Writing Files?
Three lovely ST8000NM0075 Seagates drives supplied by Dell, all suddenly failed in a RaidZ3, that's now four within 3 years and 4 months.
I didn't anticipate this and only have one spare to plug in. Feels dangerous.
I would like to change the pool…

Louis Waweru
- 755
- 1
- 9
- 29
3
votes
3 answers
Server OS on an internal USB flash drive - is this standard practice today?
While chatting with a sysadmin colleague of mine about setting up a small server for me, I found out something interesting - most servers these days apparently contain an internal USB port which can be used for attaching a boot flash drive. On one…

Vilx-
- 843
- 4
- 16
- 25
3
votes
2 answers
New domain controller on a branch office: it is better to create a new AD site?
I am going to install a new DC on a recently grown branch site. I know that is a best practice to create a new site in Active Directory Site and Service, with the relative IP link cost and related parameters.
However, both the HQ and this branch…

shodanshok
- 47,711
- 7
- 111
- 180
3
votes
1 answer
Storing saltstack server configs in version control
I currently have a few servers that are managed by saltstack, every now and then saltstack fails to deploy the new configs because of an issue somewhere and it can take a while to work out what changed that caused the issue.
It seems like having…

Qwertie
- 205
- 2
- 7
3
votes
1 answer
Group Managed Service Accounts per service per server (Best practice?) and long names?
I've talked with a few colleagues about what might be best practice for using group managed service accounts in our environment.
It seems that ideally, we would create 1 gMSA per service (e.g. SQL Agent service) per server (e.g. SQLDEV01).
This…

Michael
- 141
- 4
3
votes
1 answer
Is having an IPv6 reverse lookup zone necessary for an Active Directory network?
Is having an IPv6 reverse lookup zone necessary for an Active Directory network?
Normally I would just create it and move on, however, in this case the prefix is delegated and changes occasionally. So I have to create a new one every time the prefix…

Corey
- 2,031
- 12
- 39
- 54
3
votes
1 answer
Install DHCP failover on domain controllers vs member servers?
What is the recommendation for installing DHCP failover; domain controllers or member servers?
I can't seem to find any recommendations either way. I did find an old question here pertaining to security suggesting DHCP should never be on a Domain…

murisonc
- 2,968
- 2
- 21
- 31
3
votes
2 answers
Which symbols to avoid when naming AD DS groups?
can somebody point out to the symbols which is better not to use when naming AD DS groups? I want to have some explanations/links to documentation on why those should not be used. For example Windows Server 2012 allows you to use "/" in group name…

Mikhail
- 1,295
- 3
- 19
- 35
3
votes
1 answer
How to test configuration changes before they go live?
I'm a student volunteer helping to maintain the web server for a small website, along with a few other students. It's a pretty standard LAMP server running on Ubuntu 12.04 and mostly hosts PHP based sites.
There have been multiple times recently…

tlng05
- 245
- 2
- 10
3
votes
1 answer
AD IT Helper Permissions
My apologies if this has been asked before. If I knew the proper search terms then google would be more effective.
I would like to add a user that can join computers to the domain, Install software and printers on User Computers, maybe even change…

Jimmy
- 111
- 6
3
votes
2 answers
Importance of ha.cf file in a heartbeat/pacemaker environment?
I'm having a few issues trying to understand ha.cf and how the cluster picks up on updates.
For example, when creating a new cluster, I usually:
Set some default options in ha.cf on node 1 - node x
Start the cluster.
Run crm on any node, configure…

William Hilsum
- 3,536
- 6
- 29
- 39
3
votes
1 answer
Synchronizing RODCs to NTP servers?
I've read this nice article from Gareth Hooper regarding Domain Controller syncing to external time sources. In essence, he wrote that although Microsoft don't actually condone the practice, it's a good idea to pre-configure all DCs (especially the…

pepoluan
- 5,038
- 4
- 47
- 72