@jfath said in AD best practices:
So... still the remaining first question - is there any problem with putting DC, DNS, DHCP, and FS roles all on a single VM? Should FS be split?
AD DC, DNC and DHCP should be all one VM. FS is an acceptable function to mix with your DC when you need to. But ideally, you'd have it split. So if the VM licensing exists, split it out.