Based on recommendations and best practices from Microsoft, and information I found here, I compiled a FSMO placement scenario for 2 domain controllers:
DC1 | DC2 |
PDC Emulator RID Master Infrastructure Master | Schema Master Domain Naming Master Global Catalog |
Also, if your domain is top-level in the AD forest, configure DC1 to sync with external time sources.
To transfer roles, it is recommended to use Powershell's Move-ADDirectoryServerOperationMasterRole.
To disable Windows Recall via registry, you can add the registry keys below. They are the GPO-equivalent (for those that want to disable it this way or are unable to use group policies).
Computer policy:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\WindowsAI] "DisableAIDataAnalysis"=dword:00000001
User policy:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\WindowsAI] "DisableAIDataAnalysis"=dword:00000001