Designing the physical topology of Active Directory

Dos	Don'ts
Run domain controllers in different virtualized clusters in different data centers in order to avoid a single point of failure.	Don't save the Active Directory database and log files on virtual IDE disks. For durability, save them on a VHD that's attached to a virtual SCSI controller.
Virtual hard disks (VHDs) security is important as copied VHDs can map to a computer and read the data inside it. If someone unauthorized gains access to ntds.dit, it will expose the identities. We can use encryption services to do server-side disk encryption with customer-managed keys.
Disable time synchronization between...