As a best practice, all the domain controllers should be in a subnet that either has no external IP addresses or has ...