Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

8
votes
3answers
645 views

What are some best practices when taking over IT at a new company? [closed]

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look ...
26
votes
12answers
40k views

Active Directory: delete vs. disable departed employees [closed]

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
4
votes
1answer
762 views

Merging two companies: Best practice?

Situation: Company A purchased Company B. Offices are 40 miles apart. There are about 10 employees in each office. We want to have everyone be able to access all network resources independent of ...
2
votes
1answer
142 views

What should I do if an necessary client application has to run on an older (vulnerable) framework?

A client needs to have .NET Framework 4 installed and not patched so their software running on their Windows 2008 R2 Server functions properly. This sparks the questions: When is it okay to ...
44
votes
7answers
17k views

Best Practices in Username Standards: Avoiding Problems

I'm interested in finding out what people's experiences with standard usernames is. I've always been in places that used {firstInitial}{lastname} (sometimes with a length-limit). Now I've users that ...
51
votes
4answers
50k views

Windows Active Directory naming best practices?

After experimenting with Windows domains and domain controllers in a virtual environment, I've realized that having an active directory domain named identically to a DNS domain is bad idea (Meaning ...
73
votes
5answers
49k views

Top level domain/domain suffix for private network?

At our office, we have a local area network with a purely internal DNS setup, on which clients all named as whatever.lan. I also have a VMware environment, and on the virtual-machine-only network, I ...
68
votes
5answers
4k views

Choosing between meaningful and meaningless hostnames [closed]

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames ...
0
votes
1answer
88 views

Creating enterprise init script (to support all Linux distros)

I'd like to create my own init script to make my program start at boot and be controlled via "service" utility in most popular Linux distributions. Requirements: it should be portable across ...
0
votes
1answer
38 views

Where should the DB server be and its updates scripts should run from where?

I currently have a web application and database on the same server. I am moving the database to a new server that is spec'd for being a database. Now i have nightly scripts that run on the web ...
1
vote
1answer
207 views

Firewall Security Guidelines

I'm looking for some best practices or Security guidelines for Firewall and VPN. Trying to study a little more about network security and write a sort of decalogue (set of rules). Usefull to follow ...
1
vote
3answers
1k views

Setup Postfix as a null client?

I'm having a bit of trouble setting up postfix as a null client and have some questions. I'll be aiming to use SMTP as this is what most web applications use as a way to connect to the email server. ...
26
votes
5answers
3k views

How can I prevent accidentally jacking with a production database?

Just recently, I had a developer accidentally try to restore a database to production, when he should have been restoring to a staging copy. It's easy to do, given that the db names are similar, i.e., ...
-2
votes
1answer
132 views

How do you “prevent powerful accounts from being used on unauthorized systems”? [closed]

I was browsing through Microsoft's Best Practices for Securing Active Directory and saw the chart linked which includes some of the best practices included in the document, rated by importance. At ...
5
votes
2answers
2k views

The impact of Apache graceful restarts and user experience

Is it safe to perform a graceful restart of Apache on a production server? What effects will a graceful restart cause and what would be the impact (if any)? Will there be any detrimental impacts (e.g. ...
-1
votes
1answer
51 views

IP Network Best Practice [closed]

On my On Premise network we use IP Span 172.17.101.0-172.17.103.254 I should now connect our Windows Azure network to the On Premise network using VPN. Is it okay to use IP Span 172.16.1.0 in the ...
5
votes
2answers
3k views

Best practices for file layout in a Hyper-V server?

We've got a Hyper-V server set up, and the layout of the files is inconsistent because it was set up by several people. Here are the two different "templates" that were used: Template 1 ...
4
votes
2answers
232 views

Adding an Active Directory to a computer-local group - which scope to choose?

I am aware of the "AGDLP" rule of thumb when it comes to group nesting inside an AD strcture. But now I am wondering if there are any best practises when it comes to adding Active Directory groups to ...
3
votes
1answer
209 views

AD IT Helper Permissions

My apologies if this has been asked before. If I knew the proper search terms then google would be more effective. I would like to add a user that can join computers to the domain, Install software ...
5
votes
1answer
570 views

Managing puppet modules with git

I have a puppet/foreman server running on Debian 7 for managing my systems. I use the community version 3.7 of puppet and foreman 1.6.0. I use directory environments. At the moment I use a rather ...
5
votes
3answers
451 views

What is the name for sorting a directory with lots of files into subdirectories? [closed]

One way to make manageable a directory with a huge number of files into it is to sort the files into subdirectories named after progressive characters in the files' names. E.g.: - ...
2
votes
1answer
283 views

Performing root mysql operations in bash scripts

What is a good practice to execute root operations on mysql databases in bash scripts? For example, I want to create new database and grant privileges, I have to use: mysql -u $ROOT -p"$ROOTPASS" -e ...
0
votes
0answers
69 views

Manage User Specific PowerShell Functions in Active Directory Domain

Given: Windows Server 2012 R2 / PowerShell 4 Do need: a way to manage user/role specific PowerShell functions in an Active Directory domain. Do NOT need: help with coding these scripts. This ...
-3
votes
2answers
97 views

Scheduled Task Naming Conventions? [closed]

I would like to hear of examples of a naming convention for Scheduled Tasks in Windows, along with rationale. Thanks.
0
votes
2answers
130 views

Apache2.2 vhosts - disadvantages of using one file with many vhosts

As i am working with Apache2.2 more and more lately this thought crossed my mind (apologies if this seems a 'silly' question, still learning alot) Are there any blatant disadvantages if you use just ...
33
votes
8answers
21k views

Should I expose my Active Directory to the public Internet for remote users?

I have a client whose workforce is comprised entirely of remote employees using a mix of Apple and Windows 7 PCs/laptops. The users don't authenticate against a domain at the moment, but the ...
0
votes
1answer
1k views

Regarding AD Domain controllers and remote branch offices

We have central HQ building and a lot of small branch offices connecting via VPN and want to implement AD (If you can believe we still haven't). We want everyone to log in using domain accounts and be ...
0
votes
1answer
904 views

HPC Cluster (SLURM): recommended ways to set up a secure and stable system

I'm working with a SLURM driven HPC Cluster, containing of 1 control node and 34 computation nodes and since the current system is not exactly very stable I'm looking for guidelines or best practices ...
11
votes
4answers
37k views

How do you diagnose packet loss?

I realise this is very subjective and dependent on a number of variables, but I'm wondering what steps most folks go through when they need to diagnose packet loss on a given system?
12
votes
2answers
15k views

What Are The Best Practices For Business Folder Structure?

We've tended in the past towards having departmental folders (Sales, Marketing, etc) on a single share and then adding folders below these ad-hoc as and when they're needed. It's gotten a bit messy - ...
3
votes
2answers
421 views

Importance of ha.cf file in a heartbeat/pacemaker environment?

I'm having a few issues trying to understand ha.cf and how the cluster picks up on updates. For example, when creating a new cluster, I usually: Set some default options in ha.cf on node 1 - node x ...
1
vote
1answer
430 views

Reusable piece of code in Chef to be used several times in recipe(s)

I need to reuse some scenario in my cookbooks - create several users on a single machine and install same software for each of them. Installing the software is a repeating operation which I'd like to ...
12
votes
5answers
22k views

A secure, standard iptables rule-set for a basic HTTP(s) webserver

I have been trying to put together a basic server iptables script that will work for most sites just running a basic webserver using HTTP(S) and SSH (ports 80, 443, & 22). After all, most VPS only ...
1
vote
1answer
1k views

Nginx & long poll: Best practices to reduce memory and bandwidth footprint

I use nginx in this mode for BOSH and chat clients along with gzip. location ~* /http-bind/ { proxy_buffering off; keepalive_timeout 55; access_log off; tcp_nodelay on; ...
6
votes
4answers
625 views

powershell vs GPO for installation, configuration, maintenance

My question is about using powershell scripts to install, configure, update and maintain Windows 7 Pro/Ent workstations in a 2008R2 domain, versus using GPO/ADMX/msi. Here's the situation: Because ...
1
vote
2answers
296 views

How to go about rotating logs which are arbitrary named and placed in deeply nested directories?

I have a couple of hosts which are basically a playground for developers. On these hosts, each of them has a directory under /tmp where he is free to do all he wants - store files, write logs etc. Of ...
5
votes
1answer
291 views

BPA for AD Server 2008 and 2008 R2 DCs W32Time setting complaint

I have been going through some of the warnings raised by BPA against our DCs to make sure everything is as it should be. Everything has been going well until I got to the following warnings: The ...
1
vote
1answer
327 views

Video hosting: Host files on web server, storage server, NAS? [duplicate]

I inherited responsibility for the back-end of a growing distance education program. They have a Proliant DL160 Gen8 web server which serves video from a ReadyNAS Pro 6. We currently share the ...
2
votes
1answer
124 views

Structuring an OU to properly model an Organizational Hierarchy

I'm experimenting with using OUs in my network's Active Directory and group policy. However, I'm having a little trouble figuring out the right way to structure my OUs so that I can have individual ...
2
votes
0answers
21 views

Domain Controller's DNS NIC configuration [duplicate]

I've seen conflicting information on this online, but say you have an environment with two domain controllers: one Forest, one Site, one Domain; simple as it gets. How should each domain controller's ...
2
votes
1answer
187 views

Seeking alternative to storing binaries in git for devops

I'm not sure how to ask this best practices question since I know many StackExchange users evidently think best practices are a bad thing ... We've got Salt and Vagrant configured to stand up servers ...
3
votes
1answer
387 views

Synchronizing RODCs to NTP servers?

I've read this nice article from Gareth Hooper regarding Domain Controller syncing to external time sources. In essence, he wrote that although Microsoft don't actually condone the practice, it's a ...
0
votes
1answer
108 views

Best practice to migrate Server 2003 x64 to Server 2008 x64

We have 2 Domain Controllers running Windows Server 2003 R2 x64. DC1 has the FSMO roles and DC2 acts as a 'secondary' DC. Both are Global Catalog servers. DC1 has these roles installed: Domain ...
6
votes
1answer
110 views

When should an org invest in a private infrastructure as opposed to a partially or fully hosted solution? [duplicate]

Not referring to militaries or governments, but for other organizations or shops that needs an IT infrastructure (who doesn't nowadays). Similar to this question, but purely in regard to hardware ...
1
vote
5answers
276 views

Windows network shares organization

I would like to have some feedback about the best practices you use to publish your network share. Now, we have on our file server : one named directory for each of our user, which is backed up ...
4
votes
3answers
411 views

Keeping Track of Enterprise Desktops [closed]

Part of my job is to make sure that for computers in a specific OU, whats Actually in use = whats listed in AD = whats listed in SCCM. This is for an environment with 250k PCs, but i specifically ...
15
votes
4answers
61k views

Best Practice: vCPUs per physical core

I am trying to find some documentation or best practice guides for virtualization with respect to provisioning vCPUs per physical core (of a CPU). If it matters, I am looking at vmWare for the ...
3
votes
3answers
413 views

How much failover redundancy is enough? [closed]

I'm working on a client-server system where all clients currently submit their transactions to essentially a single west-coast IP address to reach what is called the "gateway" application. The ...
18
votes
3answers
7k views

Naming a new Active Directory forest - why is split-horizon DNS not recommended?

Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence. Use a subdomain of an ...
8
votes
5answers
4k views

Nagios server best practices?

I run a medium-sized Nagios server. It monitors roughly 40 servers with 180 services currently and is only growing by the day. I migrated from an old Nagios setup that was configured in a very ...