7,023 questions
Hi @TechQ
You can start by reading the following link :
Best Practices for Securing Active Directory
You should also implement tiers administration model and use secure desktop to manage T0 servers like domain controllers.:
Why You Should Use Microsoft’s Active Directory Tier Administrative Model
Please don't forget to mark helpful answer as accepted