Microsoft have updated their guidance around Best Practice Guide for Securing Active Directory Installations, the document can be obtained from.
http://www.microsoft.com/downloads/details.aspx?FamilyID=2eaa45c7-d936-413e-9586-a8bb6ff739d9&DisplayLang=en
I found some very useful information in this document before.