Hello @Harry Ade
there is no best course of action if you need to keep for example users to be able to log in with their existing domain credentials. It might cause a certificate issue in the RDS.
If You want your users to connect to the RDS farm You need to create a forward lookup zone on your internal DNS server for your domain, then make A records for all your RD servers in that zone. When you are setting up the connection on end user PCs you can simply point them to RDServer.domain, and as long as your certificate matches that domain it should work fine.
Also you can accomplish this with split DNS.
Hope this helps with your query!
----------
--If the reply is helpful, please Upvote and Accept as answer--