Users in root domain?

Posted on 2008-11-03
Last Modified: 2012-05-05

One of our affiliates wants a seperate domain/forest, so we're looking into their structure.

It will be a root of, with child domains of and

Is it possible/advisable to have users and other objects in the domain root? Or should they all be located in the child domains?
Question by:kam_uk
    LVL 30

    Expert Comment

    Why are you creating a multi-domain forest? There's very little reason to do so, and it significantly adds to the administrative overhead of managing the forest.

    What business need do you perceive you will be meeting by configuring a multi-domain forest?
    LVL 3

    Author Comment

    Hi Laura

    These are the requirements given to us by their management. From what I understand, their IT Support will be run by different companies in the US and the UK, hence they would prefer to have two seperate child domains.

    But I'm curious to know if we should place any users or objects in the domain root? Is this even possible?
    LVL 30

    Accepted Solution

    You can place users in any domain in an AD forest. A multi-domain forest is almost never a design that I recommend, but if that's the decision that's been made then you can place users in any domain in the forest.

    Featured Post

    Better Security Awareness With Threat Intelligence

    See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

    Join & Write a Comment

    The saying goes a bad carpenter blames his tools. In the Directory Services world a bad system administrator, well, even with the best tools they’re probably not going to become an all star.  However for the system admin who is willing to spend a li…
    Starting in Windows Server 2008, Microsoft introduced the Group Policy Central Store. This automatically replicating location allows IT administrators to have the latest and greatest Group Policy (GP) configuration settings available. Let’s expl…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now