Hi Guys/Gals I'm afraid I'm a bit of a novice and I'm after some help. I've started learning the 2k8r2 system. I have managed to configure a DNS, DHCP, print, hyper-v and Active directory server, along with a hyper-v machine acting as a Web Server. I've also attached 2 windows 7 clients to the network and have also set up pptp VPN. I have installed Symantec Enpoint Protection Small Business Edition on all my 'boxes' for added security. They're on a mixture of wired and wireless wpa2-psk conenctions. Is that enough for a domain that could effectively be a small business trading; do I need more? Or am I being overly paranoid about security? Cheers for your time and patience folks CD

Hello, first of all, I would like to recommend: Windows Server Foundation Edition for less than 15 employees SBS for less than 75 employees If you don't want these solutions then it is recommended to have at least two DC/DNS/GC servers per domain for high-availability of AD/DNS service and so that you reduce the risk of losing your domain. For VPN, I would recommend the use of L2TP/IPSec instead of PPTP. For the web server, I don't recommend that it will be a member server in order to reduce risk of attacking your domain. You have to think also about adding a firewall like TMG Forefront. By adding a firewall with three NIC cards, you can create three interfaces: Internal one: for your servers and employees External one: for WAN DMZ: for Web servers Once done, you have to configure your firewall rules with only the needed permissions so that you will: Protect your internal network from external attacks Protect your Web servers against internal and external attacks This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration