Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

0
votes
0answers
8 views

Using one powerful computer in a virtual environment vs using one powerful computer? [duplicate]

The title explains most of it, I want to know if it's more efficient to have one computer using VMWare vSphere to host servers on different virtual operating systems that only has one server per ...
0
votes
1answer
32 views

Install DHCP failover on domain controllers vs member servers?

What is the recommendation for installing DHCP failover; domain controllers or member servers? I can't seem to find any recommendations either way. I did find an old question here pertaining to ...
0
votes
1answer
31 views

domain controller naming group policy [closed]

i have two domain controller setup one on 192.168.1.10 companyname.local and 192.168.1.20 companyname.local as backup. i was task of rebuilding the backup and make it the main domain controller. i ...
1
vote
0answers
19 views

Ruby on Rails Debian best practice

I've seen in various places people using Ruby compiled from source through a cloned rbenv git repository, and then installing Rails through RubyGems to get the latest version. But, from what I know, ...
0
votes
0answers
16 views

Separate domain admin accounts - are password tokens stored for run-as?

I am considering separating our domain admin accounts as suggested in this previous thread. However, are password tokens stored for "run as" instances? If so, running MMC and other tools with "run ...
-1
votes
1answer
278 views

Are there any problems installing Office 2016 over Office 2013 directly?

Are there any problems if I install Office 2016 over Office 2013 without uninstalling Office 2013 first?
1
vote
0answers
35 views

Installing consumer software on a server

I am in need of a simple low-maintenance off-site backup solution for one or more Windows servers. I have had great success using some consumer-grade backup software that allows me to backup files ...
1
vote
1answer
37 views

How to keep a reproducible server admin log?

So here is something I am always wondering about when setting up a new Linux machine, be it desktop or server: How can I keep a reproducible log of what administration tasks I did on the machine, so ...
1
vote
1answer
37 views

Wordpress Anti Virus exclusions list

Problem background: I am contractually bound to install a system Anti Virus solution on every host. For this product I am running Linux (Red hat derived). These instances are hosting Apache/PHP ...
0
votes
0answers
8 views

Strange AD replication issue between different subnets DC. (Alternative solution is working)

I'm facing very strange issue of AD replication in with different subnets DC. Site A : 172.16.1.0/16 Site B: 192.168.20.0/24 sites are connected through P2P and IPsec tunnel (two different way). ...
4
votes
1answer
114 views

Should DirectAccess be deployed to all Windows clients that support it?

As our organization is slowly rolling out Windows 10, I made the observation of a DirectAccess GPO linked to the Windows 10 PCs OU (which contain internal desktops, laptops, and even VMs for VDI). ...
1
vote
0answers
16 views

Should each task/process/role run as its own user on a Windows server?

I know that on Linux servers, it's widely considered best practice to run each task/role/process/server/program as its own user and usually in its own group. How should separate tasks be handled on a ...
13
votes
4answers
3k views

How bad is it to run Exchange 2016 on a Windows 2012 R2 domain controller for a small organization with assuredly fewer than 25 users?

I know that it has been officially unsupported forever and yet I have seen or heard about many small business installations of a single host running AD DS and Exchange simultaneously. For a ...
1
vote
1answer
51 views

Windows Server Applicaton Administration Best Practice [closed]

I've recently switched from using a linux server for private hosting (things like a WebServer, Teamspeak, Gameservers etc.) to a Windows Server 2012 R2 machine. Under Debian I installed my services ...
2
votes
2answers
52 views

Which symbols to avoid when naming AD DS groups?

can somebody point out to the symbols which is better not to use when naming AD DS groups? I want to have some explanations/links to documentation on why those should not be used. For example Windows ...
0
votes
1answer
48 views

Active Directory Domain Naming

Planning a new domain and I keep seeing that best practice is to name the forest/domain after a subdomain of our publicly registered domain. So if we own and use company.com publicly, we should use ...
5
votes
2answers
2k views

Distinguish Between Users and Service Accounts in Active Directory

Question Is there a "correct" / standard way to distinguish Service Accounts from User Accounts in AD? More Info In certain scenarios we have systems running under AD Credentials (i.e. under a ...
1
vote
3answers
676 views

What is recommended size of hard disk for a Server?

I have heard that large hardisk >= 1TB are not recommended on the server because they can cause synching issues if one fails + their chances of failure is greater over a longer period of time as the ...
2
votes
1answer
139 views

call binary from docker container inside another docker container?

What would be the way to load a certain binary from a certain container in docker from inside another container? container 1: web container 2: ffmpeg I would want to call ffmpeg binary living in ...
0
votes
1answer
99 views

Docker best practice for storing application generated content and calling ffmpeg?

I have this setup container #1 "web" container #2 "db" Now this web container holds my application that uses ffmpeg to record streams. The problem is Im not quite sure where to store my recorded ...
-1
votes
1answer
56 views

Is installing Windows Server 2012 R2 using .com versus .local going to cause future problems? [duplicate]

I know using example.com would cause a conflict, but what about ad.example.com, corp.example.com or internal.example.com? I have a web .com domain. Will need to remote in and/or VPN etc. I am being ...
3
votes
2answers
72 views

AD | Prevent admins from changing passwords to the same thing

I have an interesting security problem: Admins with ad access have been changing their password to the same thing, and breaching the company security policy. User side, standard AD complicated ...
-2
votes
1answer
149 views

AD Best Practice for the connection specific DNS suffix network setting

What is best practice for this setting? It also goes by DNS Domain Name in DHCP scope settings. The only documentation I can find about these suffixes and domain name settings specifies the the ...
2
votes
1answer
69 views

How to test configuration changes before they go live? [closed]

I'm a student volunteer helping to maintain the web server for a small website, along with a few other students. It's a pretty standard LAMP server running on Ubuntu 12.04 and mostly hosts PHP based ...
0
votes
2answers
146 views

Should I backup from within each guest, or from the host?

I'm searching for advice on whether backups are better taken from within a guest (e.g. ShadowProtect), or from within the host (e.g. copying virtual disk files, or other software). We have 12 VM's (a ...
2
votes
1answer
73 views

Puppet: How to use a set of common packages but allow exceptions?

I have about 200 more or less identical Linux VMs. There is a class for all common configuration: class my_packages { class { "::ntp": servers => [ "de.pool.ntp.org" ], } ...
1
vote
0answers
254 views

Usermod -aG vs gpasswd -a as a best practice

I am aware that usermod -g is not best practice from many posts like this however they normally explain the usermod should not be used as it changes the primary group of a user. These posts dont seem ...
0
votes
1answer
28 views

Process separation on an OpenBSD server

I fear this may be a somewhat open-ended question that gets closed: Apologies in advance, but I'll give it a shot! I'm considering operating an OpenBSD VM with a number of services running on the ...
-1
votes
2answers
365 views

Best practices for secondary DNS in case of a single Active Directory

I have a setup with only one Active Directory (not redundant). What should be configured on the client pc's to ensure the best DNS resolution ? Currently somebody configured the IP address of the AD ...
0
votes
1answer
82 views

Setting affinity for virus protection on workstations - best practice?

Despite the modern virus protection is based on prevention by scanning network traffic and by real-time protection, many companies still have policies, that full scans must be performed regularly. ...
0
votes
2answers
87 views

Active Directory Multi Domain Enviornment

I work for a small organization which will be starting another branch of business here shortly. We have an existing active directory infrastructure and are looking to add another domain to the ...
0
votes
1answer
169 views

How to have automatic file system checks for Linux Software Raid?

In a Linux Software raid, what is the best practice for periodically having the filesystems checked? With single drive or hardware raid, tune2fs -c 5 -i 1w /dev/sda1 means check the filesystem every ...
0
votes
1answer
88 views

Creating enterprise init script (to support all Linux distros)

I'd like to create my own init script to make my program start at boot and be controlled via "service" utility in most popular Linux distributions. Requirements: it should be portable across ...
0
votes
1answer
38 views

Where should the DB server be and its updates scripts should run from where?

I currently have a web application and database on the same server. I am moving the database to a new server that is spec'd for being a database. Now i have nightly scripts that run on the web ...
3
votes
3answers
3k views

How to get php-fpm to log to stdout / stderr when running in a docker container

I have php-fpm in a docker container and in the Dockerfile I edit the fpm config file (/etc/php5/fpm/pool.d/www.conf) to set up access logs to go to /var/log/fpm-access.log and error logs to go to ...
3
votes
0answers
307 views

What is the best practise to autostart unprivileged lxc containers on Ubuntu 14.04 64bit? [duplicate]

The current implementation of the LXC technology deals nicely with an issue of starting the privileged containers upon system start.. Users of the unprivileged containers (which arguably promise ...
26
votes
5answers
3k views

How can I prevent accidentally jacking with a production database?

Just recently, I had a developer accidentally try to restore a database to production, when he should have been restoring to a staging copy. It's easy to do, given that the db names are similar, i.e., ...
-2
votes
1answer
132 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
5
votes
2answers
2k views

The impact of Apache graceful restarts and user experience

Is it safe to perform a graceful restart of Apache on a production server? What effects will a graceful restart cause and what would be the impact (if any)? Will there be any detrimental impacts (e.g. ...
19
votes
4answers
3k views

Where do companies typically store SSL certificates for future use?

We recently bought a wildcard SSL cert for our domain. We converted all of the certs to a Java keystore, but now we are asking ourselves where we should store these for later use. Do people use ...
-1
votes
1answer
51 views

IP Network Best Practice [closed]

On my On Premise network we use IP Span 172.17.101.0-172.17.103.254 I should now connect our Windows Azure network to the On Premise network using VPN. Is it okay to use IP Span 172.16.1.0 in the ...
5
votes
2answers
3k views

Best practices for file layout in a Hyper-V server?

We've got a Hyper-V server set up, and the layout of the files is inconsistent because it was set up by several people. Here are the two different "templates" that were used: Template 1 ...
7
votes
2answers
380 views

Transition away from Domain Admin only account

In our Windows environment, our Domain Admins only have one user account. This single user account is used across the board including running on a day to day workstation. In our transition away from ...
4
votes
2answers
232 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
3
votes
1answer
209 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
5
votes
1answer
572 views

Managing puppet modules with git

I have a puppet/foreman server running on Debian 7 for managing my systems. I use the community version 3.7 of puppet and foreman 1.6.0. I use directory environments. At the moment I use a rather ...
5
votes
3answers
451 views

What is the name for sorting a directory with lots of files into subdirectories? [closed]

One way to make manageable a directory with a huge number of files into it is to sort the files into subdirectories named after progressive characters in the files' names. E.g.: - ...
0
votes
0answers
69 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
2
votes
1answer
283 views

Performing root mysql operations in bash scripts

What is a good practice to execute root operations on mysql databases in bash scripts? For example, I want to create new database and grant privileges, I have to use: mysql -u $ROOT -p"$ROOTPASS" -e ...
-3
votes
2answers
97 views

Scheduled Task Naming Conventions? [closed]

I would like to hear of examples of a naming convention for Scheduled Tasks in Windows, along with rationale. Thanks.