Re: Disadvantages of working at the forest level?
- From: "Herb Martin" <news@xxxxxxxxxxxxxx>
- Date: Tue, 30 Jan 2007 12:14:03 -0600
"Michael" <admin@xxxxxxxxxxxxx> wrote in message
news:u6MSnJJRHHA.2172@xxxxxxxxxxxxxxxxxxxxxxx
Hi,
Should a domain always be created below the forest level?
Or can we work at the forest level if we want?
The Forest is ALL domains of that forest, so we must presume
you are using the phrase "forest level" to mean the "Root Forest
Domain" ( or perhaps an additional "Tree Root".)
You can run a forest perfectly fine under many/most conditions
with a single domain.
There are specific reasons for creating domains but most small
and medium size companies can do just fine with a single domain
in their forest.
Just looking for reasons/advantages/disadvantages.
We would have to write the equivalent of about a chapter in
a book to give that full coverage, all without knowing your
situation.
Generally, domains are created for some of these SPECIFIC reasons:
1) (near) Full control by other admins *
2) Mirror NT Domains (because we always did it that way, or temporarily
*
during migration)
3) Massive number of objects ** (seldom needed)
4) Control replication in very poor replication situations (seldom
needed) **
5) Different account security policies -- password, lockout, kerberos
6) Anything else that causes you to need a different forest***
* #1 and #2 are really very similar and related in many cases.
** #3 and #4 are related in that AD can support 10 Million users or more
in a separate domain, and it can usually replicate efficiently over slow
lines,
but if the line is slow/poor/error_prone etc and the number of objects is
LARGE then this is a balance, more objects require better lines to "stay in
the same domain" (at some point.)
#4 might also be caused by heavily filtered WAN firewalls that disallow RPCs
but do allow SMTP -- SMTP replication requires separate domains.
*** Main reasons for creating a forest are:
1) Complete autonomy (truely separate security boundaries and control)
2) Different schemas
--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)
.
- References:
- Disadvantages of working at the forest level?
- From: Michael
- Disadvantages of working at the forest level?
- Prev by Date: Re: Need Step by Step on how to add Mexico & Europe to Placeholder Dom
- Next by Date: Re: Disadvantages of working at the forest level?
- Previous by thread: Disadvantages of working at the forest level?
- Next by thread: Re: Disadvantages of working at the forest level?
- Index(es):
Relevant Pages
|
Loading
