http://microsoftguru.com.au/2011/05/28/microsoft-active-directory-best-practice/
http://microsoftguru.com.au/2012/07/29/microsoft-active-directory-best-practice-part-ii/