Just a reminder that end of life for Server 2012 and 2012r2 is hitting. You can opt for 0Patch, or plan on upgrading and migration.
Some resources include:
Got FRS and need to upgrade to DFS?
Best practices for securing AD
Securing domain controllers against attack
Monitoring AD for signs of compromise
Susan Bradley Patch Lady/Prudent patcher