Best practice for Active Directory (AD)

Read this bit I posted yesterday: