Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [best-practices]

Questions asking for best practices in a given field. Be aware, that sometimes there might be no generally accepted best practices, in which case the question is likely to be closed for being subjective.

7
votes
2answers
105 views

How to plan an Active Directory domain rename without it killing me?

It's looking more and more like I'll have to rename my Active Directory domain. There is a well-known process for making this change, including some very good answers on Server Fault already (like ...
0
votes
0answers
40 views

How do you protect SharePoint data from terminated employees?

Background: (not required for question, but might offer some perspective) I work for a textile design company, with 40 % of all our computers consisting of Macs. The company has approx. 250 ...
1
vote
2answers
83 views

What is the downside of deleting an iptables rule as an attempt to check if it exists?

I want to add a rule using iptables, but only if it does not exist already. There's option -C which will allow us to check if a rule specification exists already. The option is described in this Q&...
0
votes
0answers
33 views

Use default `ubuntu` user to deploy an app or make separate users?

I have a Ruby on Rails app and use Capistrano to deploy it to the server. The deploy user and the user running the app is the same - the default ubuntu user. (this has sudo access: ubuntu ALL=(ALL) ...
0
votes
0answers
23 views

Any Issues Setting Active Directory Groups Up This Way?

I am looking into restructuring our AD Groups Infrastructure and am having a hard time find the best way to reorganize. The reason this is a unique challenge is because of our employee roles. No two ...
-3
votes
1answer
61 views

Accepted standards for incremental or differential backups

I need to choose software for network backup (this is not a software recommendation question). I wonder if there are accepted standards for incremental or differential backups, so different software ...
-2
votes
1answer
40 views

What is the Industry Best Practice for Updating Dell Drivers ? [closed]

Is it ok to upgrade to latest drivers whenever we provide it to end-user ? or we should keep the Drivers with OS which has been shipped by Dell along with OS Kindly suggest if there is any document ...
0
votes
0answers
80 views

How to avoid specifying variables many times with puppet roles and profiles pattern?

I am writing puppet modules and trying to understand and implement roles and profiles pattern , along with some best practices, particularly about hiera autolookups and splitting the module into ...
0
votes
0answers
3 views

Isolating server errors

I'm fairly new to hosting with Digital Ocean. I only have about 3-4 sites up currently. I've ran into a few instances where if I misconfigure something or an update goes bad, it takes down all the ...
4
votes
1answer
91 views

What are the pros/cons of running Chef/Puppet at regular intervals?

I always worked where they used to run Puppet at regular intervals. So, distributing changes was easy and on the fly. In the new team, they frown upon running the Chef agent at regular intervals. They ...
0
votes
3answers
110 views

Best Practice: What domain admin credentials to use when adding/joining computer to network domain?

Environment: 1 Win2008R2 Network Server (also domain controller) 13 or so Workstations. Traditionally we've always used the server administrator credentials to join a workstation to a business domain ...
21
votes
2answers
2k views

Is it bad practice to declare MX from differing networks?

We're using a 3rd-party service provider to send transactional email. I recently noticed increased failure rates for a given receiving domain. The sends fail with the error "498 No MX for example.com"...
3
votes
2answers
331 views

New domain controller on a branch office: it is better to create a new AD site?

I am going to install a new DC on a recently grown branch site. I know that is a best practice to create a new site in Active Directory Site and Service, with the relative IP link cost and related ...
0
votes
1answer
30 views

Should I create a new user for each web app?

I have a VPS and I'm trying to gather the best practices in terms of user setup for web services. I have different services in my server (a cloud app, a streaming app, etc). What I do know is that I ...
0
votes
0answers
78 views

DNS with Azure and Active Directory

I am deploying a new Active Directory Network with an already created Azure Tenant. The Azure Tenant is on a gTLD example.com but I want to build my DNS and naming scheme to separate public cloud from ...
5
votes
1answer
45 views

Best Practice Moving a Hard Drive from one VMWare ESX Guest to Another

When removing a hard disk from a VMWare ESX virtual machine running Windows, is it best practice to shut down the server first or is there a minimal risk (if the drive is not being written to at the ...
1
vote
1answer
98 views

Should apex (or zone root) records have a matching PTR/pointer record

I am aware that apex records (records at the zone "root") can have PTR records, but frequently I see that zone root records do not have a matching PTR, or they are pointing to a different place than ...
3
votes
1answer
158 views

Storing saltstack server configs in version control

I currently have a few servers that are managed by saltstack, every now and then saltstack fails to deploy the new configs because of an issue somewhere and it can take a while to work out what ...
0
votes
1answer
167 views

Best practice: Wowza SSL Configuration

Screenshot: Server with Wowza running using a SSL certificate with basis configuration I get this result from the SSLLabs with the default configuration (see screenshot). The only places I can change ...
1
vote
2answers
435 views

Do password expiry rules reducing the security of the system?

The problem I regularly have a debate with my CTO which usually begins something like this ... CTO: My password expired, that should never happen. Me : It's a security risk to never expire ...
0
votes
2answers
30 views

Bypass Browser Cache with Server Settings in Large Production Environment

We recently applied a patch to our ERP system that updated HTML, JavaScript and CSS files. After applying the patch a large volume of users called the help desk to report loss of functionality on the ...
-2
votes
1answer
51 views

What are the dangers of buying a windows entreprise key online? [closed]

For multiple reasons I've settled on using Windows 10 Enterprise LTSB. Apart of getting a fake key or getting a legitimate key revoked, what are the dangers of purchasing / applying an unknown ...
18
votes
4answers
7k views

Is there any reason to allow SMB over the internet?

I'm an admin at a hosting company and I deal primarily with Linux machines though we have plenty of customer with Windows servers. In my capacity I have only ever used SMB for a file / print server ...
0
votes
1answer
38 views

Git branches for managing machine specific scripts and timers: OK or bad idea?

I have a bash script that I need to run on multiple (personal) machines, using systemd timers. While largely similar, there is some functionality in these scripts that I need enabled on some machines, ...
95
votes
10answers
9k views

Is it better practice to buy RAID disks individually vs. in bulk?

This may sound like an odd question, but it's generated some spirited discussion with some of my colleagues. Consider a moderately sized RAID array consisting of something like eight or twelve disks. ...
2
votes
3answers
234 views

Hypervisor server Local storage Raid configuration

We have a couple of Dell PowerEdge R630 running Hyper-V and just bought new hard disks to fill all the empty slots. I was wοndering what kind of Raid configuration should we proceed. Currently each ...
2
votes
2answers
288 views

Solaris 11 ZFS Snapshot vs. New Boot Environment

I'm new to Solaris 11 and I have to apply updates. I read that you can create a ZFS snapshot -- apply updates -- then revert the snapshot if things break. I also read that you can create a backup of ...
4
votes
2answers
120 views

best-practice for mid-sized shared storage

Our old 32TB RAID6 (net capacity: 26TB) system is showing its age and requires an upgrade, so we are currently thinking about building up a new 100TB system. The storage is mostly used for our user's ...
1
vote
1answer
447 views

Group Managed Service Accounts per service per server (Best practice?) and long names?

I've talked with a few colleagues about what might be best practice for using group managed service accounts in our environment. It seems that ideally, we would create 1 gMSA per service (e.g. SQL ...
0
votes
1answer
38 views

FTP Server 'Netiquette'; Are fast and frequent Connect/Transfer/Disconnect session acceptable?

some code of mine is using a queue to upload files to an FTP server. When files get queued, a connection attempt is made and, if successful, files are uploaded. Once the queue is empty it disconnects ...
1
vote
2answers
226 views

How should web servers handle requests with incorrect Host header?

I am getting a number of requests to my site with the Host header set incorrectly (most commonly to the IP address instead of domain name). Currently I am returning 400 Bad Request. I am thinking of ...
3
votes
1answer
341 views

Is having an IPv6 reverse lookup zone necessary for an Active Directory network?

Is having an IPv6 reverse lookup zone necessary for an Active Directory network? Normally I would just create it and move on, however, in this case the prefix is delegated and changes occasionally. ...
1
vote
0answers
73 views

Serving dynamic website to multiple domains

I have created a website with a tiny administration panel that lets the owners change attributes about the site (primary color, background image, some content etc). Their changes are stored in a ...
0
votes
1answer
77 views

How do multiple devops manage single chef cookbook?

I have created a cookbook and I am using manage.chef.io to host and deploy it. I have hosted the cookbook in GitHub private repo. Consider a scenario: If I make some changes in the cookbook and ...
24
votes
3answers
10k views

Ansible security best practices

I am going to introduce Ansible into my data center, and I'm looking for some security best practice on where to locate the control machine and how to manage the SSH keys. Question 1: the control ...
4
votes
2answers
18k views

Best practices for an in-place upgrade from Server 2008r2 to 2016?

I've got several web servers servers running Server 2008r2 SP2 Standard with SQL Server 2014. What is the best practice / easiest in-place upgrade path to get to Windows Server 2016? In testing I'm ...
0
votes
0answers
28 views

After system state restore: SBS Baseline Configuration Analyzer 2.0 stopped working

So the system drive of our SBS 2011 server has crashed. We had a backup which we used to perform a systemstate recovery and non-authorative restore of Active Directory. Since the restore, we cannot ...
1
vote
3answers
1k views

Is it good practice to set HTTP headers in the load balancer?

I am managing a setup where there are two ngnix application servers behind an nginx reverse proxy. I would like to set some headers like X-XSS-Protection or Strict-Transport-Security. Currently, it's ...
-2
votes
2answers
508 views

Is it good practice to name an admin account 'admin' or 'administrator'?

I have seen on numerous occasions that organisations name their admin account anything but admin or administrator. Most often of course people in help desk would use their own account with different ...
0
votes
1answer
45 views

How to create an account, that can not login?

Our Unix systems rely on corporate AD for authentication and authorization. We need to create a few "role" accounts, which shall not be able to login themselves, but to which other accounts (...
5
votes
1answer
1k views

What is the proper way to configure Active Directory and Domain Controllers when only a dynamic (not static) IPv6 prefix is available?

When neither provider-independent address space or an ISP assigned static prefix is available, and a delegated prefix (via DHCPv6) is the only option… What is the "best practice" for configuring ...
2
votes
3answers
3k views

Docker: Run Cronjob for different Container

I am looking for best practices about running cronjobs for my php fpm container. Right now running: NGINX Container PHP FPM Container MySQL Container I now would love to have another Container ...
112
votes
8answers
18k views

Best practice: Should I always install a fresh OS for new employees?

I had an argument with a superior about this. Though at first glance the prior user of a laptop only did work in his own documents-folders, should I always install a new OS for the next user or is ...
1
vote
3answers
147 views

Secure Administration AD Domain

I have a project to securize my Active Directory infrastructure. To do that, one of my colleague told me about the possibility to create another AD domain in the forrest just for administration. That ...
4
votes
2answers
3k views

Best Practices for AD DS Backup and Recovery?

So Microsoft claims that "you cannot use a network shared folder as a backup target for a system state backup", but I've seen plenty of posts where people indicate that they are able to do this from a ...
1
vote
1answer
879 views

Is there a memcached memory limit best practice?

Is there a best practice or general rule of thumb when setting the memory limit for memcached? I'm currently running memcached with the default memory limit of 64 megabytes. The server has 8 ...
1
vote
1answer
725 views

Fastest method to deploy Linux to large numbers of workstations

A nonprofit has received a donation of a large number (>100) decommissioned workstations. What would be the most efficient method of taking a standardized ISO image of a Debian Linux distribution (for ...
1
vote
1answer
893 views

Install DHCP failover on domain controllers vs member servers?

What is the recommendation for installing DHCP failover; domain controllers or member servers? I can't seem to find any recommendations either way. I did find an old question here pertaining to ...
0
votes
1answer
42 views

domain controller naming group policy [closed]

i have two domain controller setup one on 192.168.1.10 companyname.local and 192.168.1.20 companyname.local as backup. i was task of rebuilding the backup and make it the main domain controller. i ...
1
vote
0answers
43 views

Ruby on Rails Debian best practice

I've seen in various places people using Ruby compiled from source through a cloned rbenv git repository, and then installing Rails through RubyGems to get the latest version. But, from what I know, ...