FSMO placement and optimization on Active Directory domain controllers

Are you new to Microsoft Windows Server infrastructure? There are a few basic stuff you need to know first.

Here is some good piece of information to start your journey:

FSMO placement and optimization on Active Directory domain controllers

Global Catalog vs. Infrastructure Master - Directory Services/Active Directory

Good article to help with an infrastructure design...

Global Catalog vs. Infrastructure Master - Directory Services/Active Directory

Windows Server 2008 ADPREP

Here is a good article explaining how to prepare your Active Directory to introduce 2008 Domain Controllers into existing 2000 or 2003 domains. The same idea applies to 2008 R2 Domain Controllers.

Windows Server 2008 ADPREP

Using groups in Active Directory

It is best practice to use groups to grant people or computer access to ressources. Here are the general rules to choose the right type of group:

Domain local is for the access of ressources.
Global group is for users of the same type or interests.

You create a domain local group to manage permissions on a domain ressource and you nest in it global groups to apply those permissions to the users or computers.

More information:

http://technet.microsoft.com/en-us/library/cc755692(WS.10).aspx

http://support.microsoft.com/kb/231273