@jfath said in AD best practices:

So... still the remaining first question - is there any problem with putting DC, DNS, DHCP, and FS roles all on a single VM? Should FS be split?

AD DC, DNC and DHCP should be all one VM. FS is an acceptable function to mix with your DC when you need to. But ideally, you'd have it split. So if the VM licensing exists, split it out.

@jfath said in Hypervisor choice:

After considering the options everyone has presented, I'm going to install and test KVM on a spare server, then move forward with either that or XS/XO. I think the value of an open source solution is the deciding factor for me in this particular case.

Their userbases are certainly "big enough" which is the important part.