Re: Is "Dedicated Forest Root" Still Recommended?

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: eric z (eric_at_fakecom.com)
Date: 02/02/05 

Date: Wed, 2 Feb 2005 09:52:17 -0500

Thanks, eveyone.

Here is my situation:

We are not a small company so we can afford to purchase the HW and SW for
two servers, neither are we a multinational corp which will have a lot of
benefits if use "Dedicated Forest Root Domain".

Reason for no: We have about 3000 machines, including 100+ servers, and
4000+ users in one single NT domain with centralized IT department. Most of
our machines and servers are in one city. Very few machines and users are
out of town but it will NOT be an issue if we choose the main site(s) as the
root domain and choose these branch as Regional Domain. Our admins are
overloaded.

Reason for yes: Our main concern is that we have too many domain admins,
some of whom are not well trained on Windows and some are vendors. We are
in the middle of cleaning up the mess but we are not sure if the result
will come out as we expected.

We are not certain if it is a wise decision to or not to use the "Dedicated
Forest Root Domain" and eager to find out if it is still highly recommended
or is best practice, which will give us a bias on yes.

Thanks,

Eric

"Ryan Hanisco" <rhanisco@flagshipis.com> wrote in message
news:OJWq$$NCFHA.2384@TK2MSFTNGP14.phx.gbl...
> Eric,
>
> As everyone has pointed out, there are a lot of cases where having a
single
> management domain makes a lot of sense. And while I don't speak for
> Microsoft, the overarching theme is a bit of Ocam's Razor for the IT
> world -- Choose the simplest implementation that meets your needs.
>
> If you are a small company, have unified management of all of your
systems,
> or don't cross political boundaries, your needs will be very different
from
> those of a multinational corporation with IT management distributed across
> its business units.
>
> As Paul, Simon and Mark have pointed out, there are times where the
business
> needs dictate this structure and AD is flexible to adapt to these needs.
> The real art in the planning is to accurately define the business goals
and
> needs and let them dictate the design. This is what shows the mark of a
> great systems designer.
>
> --
> Ryan Hanisco
> MCSE, MCDBA
> Flagship Integration Services
>
> "eric z" <eric@fakecom.com> wrote in message
> news:%23G$TPUICFHA.1524@TK2MSFTNGP09.phx.gbl...
> > Hi everyone,
> >
> > Does anyone know if the "Dedicated Forest Root Domain" is still
> > recommended
> > by Microsoft?
> >
> > Thanks in advance.
> >
> > Eric
> >
> >
>
>

Relevant Pages

  • Re: Security Breach ?
    ... >> machines that have been compromised, then you can claim to be ... moved many of the servers to SlackWare then Redhat until the SCO ... lawsuite made management uncomfortable. ... to the disappointment of the MCSE at the time. ...
    (Fedora)
  • Re: Public facing IIS/MSSQL servers in AD?
    ... to or listen to" other AD member machines ... even in the internal network; ... How many servers or users can you have in such a configuration? ... Is there a good alternative to AD for management? ...
    (microsoft.public.windows.server.security)
  • RE: Betr.: Re: MS Patches Management software: SUS vs 3rd party
    ... We are also currently looking at a solution for updating our clients and servers. ... The major drawback is that if a new unpatched client connects to it, it retrieves all patches at once. ... There is no management in SUS, ... >The Presidio integrates PGP data encryption and XML Web Services security to ...
    (Security-Basics)
  • [OT]: IBMs view on how chips make valued-added proposition
    ... IBM's Computer-Server Business ... global market for heavy-duty "servers" that power most big businesses. ... After regaining the top spot in servers in 2002, IBM captured 32% of the ... instead of standardizing on Intel chips as many competitors have ...
    (comp.os.vms)
  • Re: Betr.: Re: MS Patches Management software: SUS vs 3rd party
    ... > it retrieves all patches at once. ... There is no management in SUS, ... > If they are planning to include the Windows NT 4.0 servers for the ... >> simplify the management and deployment of PGP and reduce overall PGP ...
    (Security-Basics)