How to secure Active Directory

This key application of Microsoft’s needs to be battened down.