Active Directory DC care for tiny domains

Do-no-harm AD notes for techs who occasionally touch a single-DC office. Never casually - Seize FSMO roles without knowing why - Restore an old DC snapshot into a live domain - Turn off the only DNS server that AD depends on Health - dcdiag / repadmin basics when replication exists - Keep time sync sane (Kerberos) - Monitor disk space on NTDS volumes If you are not the AD owner, take a backup and escalate rather than “quick fixes”.