I have a new article in the April edition of Windows IT Pro: 5 Steps to a Secured Active Directory. In it, I cover the fundamental things system administrators must do to ensure a basic level of security with Active Directory.  Often people concentrate on more advanced security issues such as defending against root kits, but ignore the basics like providing physical security or implementing secure administrator practices. If you can do the things in this article, you'll be better off than most.