Super quick notes i made during a customer change today.
Date: 2009-04-23
TIP 1: Copy and paste this into your RFC, replace $DOMAINNAME and $HOSTNAME as you see fit.
TIP 2: Don't place ALL the FSMO roles on one domain controller.
TIP 3: Transfer the PDC Emulator role closer to the bulk of your sign-ins; say on-premise where your head office is, or in the datacentre where your VPN terminates for all staff.