Use dedicated domain controllers especially if you want to ensure security of your DC ? Have at least two DNS server – This will minimize downtime in the event that one fails. Use of multiple domain controllers is to provide a degree of fault tolerance in case one of the domain controllers fails ? Don’t neglect the FSMO roles (backups) daily between midnight and 0400 replication every 30 minutes to avoid latency ? Set up a manual site link bridge to increase performance by creating shortcuts between the two branches