If books are more your thing, this helped me tremendously...
https://www.amazon.com/dp/1642350028/ref=cm_sw_r_cp_apa_i_eJ2gFbC287W1E
You could lock it down hard by careful configuration. This book is well worth a read