Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

learn more… | top users | synonyms

36
votes
4answers
33k views

Windows Active Directory naming best practices?

After experimenting with Windows domains and domain controllers in a virtual environment, I've realized that having an active directory domain named identically to a DNS domain is bad idea (Meaning ...
63
votes
5answers
38k views

Top level domain/domain suffix for private network?

At our office, we have a local area network with a purely internal DNS setup, on which clients all named as whatever.lan. I also have a VMware environment, and on the virtual-machine-only network, I ...
16
votes
3answers
5k views

Naming a new Active Directory forest - why is split-horizon DNS not recommended?

Hopefully, we all know what the recommendations for naming an Active Directory forest are, and they're pretty simple. Namely, it can be summed up in a single sentence. Use a subdomain of an ...
63
votes
5answers
4k views

Choosing between meaningful and meaningless hostnames [closed]

Assume an environment with a puppet-managed cluster of different servers - various hardware, software, operating systems, virtual/dedicated, etc. Would you choose meaningful hostnames ...
3
votes
2answers
2k views

things to check prior to moving all FSMO roles to a new domain controller before decommission original old domain controller

need to move a domain controller, the first in the forest that holds all the fsmo roles, to another location in a clients building. it will require turning off this dc, call it dc1 for this question. ...
31
votes
8answers
13k views

Should I expose my Active Directory to the public Internet for remote users?

I have a client whose workforce is comprised entirely of remote employees using a mix of Apple and Windows 7 PCs/laptops. The users don't authenticate against a domain at the moment, but the ...
45
votes
7answers
5k views

Cable Management Policy

We've all seen good and bad examples of cable management. What are objective, measurable requirements that can be used in a policy to maintain cabling order in the rack/server room/data center? ...
42
votes
7answers
12k views

Best Practices in Username Standards: Avoiding Problems

I'm interested in finding out what people's experiences with standard usernames is. I've always been in places that used {firstInitial}{lastname} (sometimes with a length-limit). Now I've users that ...
16
votes
8answers
1k views

Best practices for backup checking?

It is a common situation, when administrator makes system for automatic backuping and forgets it. Only after a system fails administrator notices, that backup system has broken before or backups are ...
8
votes
3answers
595 views

What are some best practices when taking over IT at a new company? [closed]

I thought this would make for a good topic with some interesting suggestions. What are the first things you would do when taking over IT at a new organization? What are some red flags you would look ...
8
votes
4answers
25k views

How do you diagnose packet loss?

I realise this is very subjective and dependent on a number of variables, but I'm wondering what steps most folks go through when they need to diagnose packet loss on a given system?
7
votes
5answers
2k views

Nagios server best practices?

I run a medium-sized Nagios server. It monitors roughly 40 servers with 180 services currently and is only growing by the day. I migrated from an old Nagios setup that was configured in a very ...
17
votes
1answer
1k views

How to correctly move a server inside a rack up and down

Maybe a bit stupid question, but Sometimes (rarely but it happens) I need to move a server in a rack 1-2U up or down. What do you think, which of the ways is the most correct and useful and why? ...
25
votes
12answers
30k views

Active Directory: delete vs. disable departed employees [closed]

When an employee leaves your organization, do you delete or disable their Active Directory account? Our SOP is to disable, export/purge the Exchange mailbox, and then after "some time" has elapsed ...
8
votes
1answer
905 views

Best practice for Exchange 2010 HA topology considering 6 x Exchange licenses and TMG 2010

What would be best topology considering that: 6 x Exchange 2010 Standard Licenses 2 x Separate locations that are supposed to support redundancy in case of link problems 4 x Forefront TMG 2010 with ...
19
votes
6answers
2k views

Bad to be logged in as admin all the time?

At the office where I work, three of the other members of the IT staff are logged into their computers all the time with accounts that are members of the domain administrators group. I have serious ...
5
votes
4answers
996 views

dead man's switch for remote networking interventions on Linux

As I'm going to change the network configuration of a remote server, I was thinking of some security mechanisms to protect me from accidentally losing control on the server. The level-0 protection ...
11
votes
2answers
9k views

What Are The Best Practices For Business Folder Structure?

We've tended in the past towards having departmental folders (Sales, Marketing, etc) on a single share and then adding folders below these ad-hoc as and when they're needed. It's gotten a bit messy - ...
10
votes
5answers
614 views

Tips to gracefully take over a (UNIX) production server

After months of neglect, e-mail flames and management battles our current sysadmin was fired and handed over "the server credentials" to me. Such credentials consist in a root password and nothing ...
3
votes
2answers
3k views

How can I check access of a Group/User in AD before I delete it?

I'm cleaning up an inherited domain that is not well documented. How can I check that a particular group or user has no ACEs across the AD? Things like searching DACL/SACL for AD objects and file ...
2
votes
1answer
159 views

Performing root mysql operations in bash scripts

What is a good practice to execute root operations on mysql databases in bash scripts? For example, I want to create new database and grant privileges, I have to use: mysql -u $ROOT -p"$ROOTPASS" -e ...
1
vote
1answer
1k views

what would be a better practice instead of chmod g+r /etc/shadow so I can use Unix user/group database for Jenkins authentication?

I don't want to run Jenkins as root, nor giving public access (or even group access) to /etc/shadow seems to a good idea. as suggested by "Manage Jenkins" when selecting Linux user/group database: ...
0
votes
1answer
66 views

How to have automatic file system checks for Linux Software Raid?

In a Linux Software raid, what is the best practice for periodically having the filesystems checked? With single drive or hardware raid, tune2fs -c 5 -i 1w /dev/sda1 means check the filesystem every ...
6
votes
1answer
106 views

When should an org invest in a private infrastructure as opposed to a partially or fully hosted solution? [duplicate]

Not referring to militaries or governments, but for other organizations or shops that needs an IT infrastructure (who doesn't nowadays). Similar to this question, but purely in regard to hardware ...
6
votes
3answers
306 views

Is there already a recommended IPv6 Firewall setup?

I'd like to switch from private-IPv4-subnet-behind-NAT to IPv6, but of course I have no intention of exposing my users' workstations "unprotected" to the net. Some obvious points up-front: Allow ...
3
votes
3answers
275 views

Disk-to-disk backup to same storage array?

We're looking to get a new SAN, and so we're re-examining our storage, network and backup issues. Our plan is to get an EMC VNXe 3100 with SAS drives for production data, then buy an expansion shelf ...
3
votes
1answer
1k views

Fibre Channel zoning best practices

I'm hoping that this will be useful for more people than just me. Right now I've got a fibre channel switch, a NetApp filer, and some servers running Oracle. All of the servers can see the same LUNs ...
2
votes
2answers
183 views

Can a Windows Server CA separate code-signing keys from keys for other purposes?

I am a software developer. My team encrypts the sensitive sections of our ASP.NET web.config files. aspnet_regiis.exe is used to manage the local key store, encrypt and decrypt. I want to build a ...
1
vote
2answers
441 views

ZFS: Best-practices doc state: “On systems with 1,000s of ZFS file systems…”?

The docs state: "On systems with 1,000s of ZFS file systems, provision 1 GB of extra memory for every 10,000 mounted file systems including snapshots." What does that mean - how do these people use ...
0
votes
4answers
675 views

Active Directory Design

Please assist me in how I design my active directory hierarchy based on the following. We have a corporate office where there 8-10 departments and 200+ <250 users are present. We have two ...