Re: Child Domain



Generally speaking, you'll create a child domain (or a new domain tree) if
you need to create security settings for one group of clients that are
different from the rest of your clients. There are certain AD settings like
password length/complexity and account lockout settings that can only be set
at the domain level. So if your ASP clients need different security settings
than your company computers, a child domain might be the way to go.

Some companies will use a child domain to segregate the administration
process as well, but you can do that just as easily by placing your NT 4.0
clients in a single Organizational Unit.

--
Laura E. Hunter
Microsoft MVP - Windows Server Networking
Author: _Active Directory Consultant's Field Guide_
(http://tinyurl.com/7f8ll)

All information provided "AS-IS", no warranties expressed or implied.
Replies to newsgroup only.


"Jobe Gates" <jgates@xxxxxxxxxxx> wrote in message
news:O3oe1B9VFHA.3140@xxxxxxxxxxxxxxxxxxxxxxx
> We have 2 domains currently one for our company and one for our ASP
> customers. We've decided to add all of our NT 4.0 clients to the domain
> and are unsure of where to put them. We aren't sure if we should either
> do a child of the ASP domain or put it in the top level ASP domain.
>
> Any thoughts?
>


.



Relevant Pages

  • Re: Secondary Sites
    ... you cannot assign clients to them. ... Check out the SMS Technical FAQ: ... Can the advanced client talk to the existing primary site server if ... You mention that you have a child domain within your LAN. ...
    (microsoft.public.sms.setup)
  • Re: New AD tree or AD forest?
    ... Why the clients need to access to your internal domain? ... by SQL reporting services, how will they authenticate? ... > we have one forest with one domain. ... Create a child domain, then join SQL part of the child domain, and create ...
    (microsoft.public.windows.server.active_directory)
  • Re: Remote Control agent not found using TCP
    ... If you have child domain, than you should make special account in child ... Otherwise clients will ... 13.Set client push installation account. ...
    (microsoft.public.sms.admin)
  • Re: Users and Groups
    ... "BrettsNEWS" wrote in message ... the reason I wanted it was to remove buttons on my main ... This approach this means you are free to send your clients new updates to ... their software...but NOT loose any current security settings the ...
    (microsoft.public.access.forms)
  • Re: Child Domain Administration
    ... of our clients is maintained in that domain. ... id's to each child domain as then you get into a password nightmare. ... it's not such a great idea to use the enterprise admins ... > able to fully administer all objects in the domain without much change - ...
    (microsoft.public.windows.server.active_directory)