Clearly understand your roles and responsibilities in the enterprise network and understand how the different components that make up the network communicate and rely on one another.
Choose the appropriate administrative model (central, distributed, or mixed) for the organization based on required services and skillsets in each location.
Track licensing usage using a centralized server.
Use site policies to define custom network security settings for sites with higher requirements or to delegate administrative rights when administration is performed on a mostly geographic basis.
Ensure that sites contain local network services such as domain controllers, global catalog servers, DNS servers, DHCP servers, and, if necessary, WINS servers.
Use security groups to create distribution lists.
Create a universal group to span domains, but have only a global group from each domain as a member.
Keep roaming profiles at small, manageable sizes.
Use mandatory profiles to increase security and gain control over the desktop.
Use profile templates to minimize the amount of required administration.
Use local and group policies to manage users and desktops.
Modify Group Policy security entries to limit Group Policy application to specific users or computers.
Use RSOP or the command-line utility GPResult.exe to view and troubleshoot the way group policies are applied.
Use the Print Management Component added to Windows 2003 R2 to centrally view, manage, and administer printers in the network environment.