Alex Bolla
asked on
Active Directory
At this point I have 8 separate domains under 8 separate forests'. I want to do the best AD structure for the entire enterprise. What I am thinking is to make the corp domain, and then make all of the others child domains of the corp domain. Eg... corp.local, a.corp.local, b.corp.local, etc...
None of the domains need to replicate AD with the others, so I am thinking of a bridge head server for everyone to replicate to.
We also have a colo with a Citrix farm...how will this affect the Citrix farm?
Is there a better way to do this or am I on the right direction?
None of the domains need to replicate AD with the others, so I am thinking of a bridge head server for everyone to replicate to.
We also have a colo with a Citrix farm...how will this affect the Citrix farm?
Is there a better way to do this or am I on the right direction?
ASKER
Well the Citrix is jamming me up, b/c right now the Citrix is on our Colo, and users (ones that need access to published apps) are added directly to AD in that realm. If we re-join Citrix into the root domain how will that affect flow to the other domains? And does Citrix go in front of the bridgehead?
Sorry, I'm slightly confused as to your configuration. Do you have DCs in your colo for your Citrix servers to use?
ASKER
No the AD is running on all 3 of the Citrix Farm servers.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks. That is the way that I was leaning, but just wanted to air it out to see if I was on the right track. Again thank you.
Wow... it sounds as though you have a large Active Directory network there!
Your best option is undoubtedly to use one root domain, and then make the other domains child domains in the same forest. This gives you the flexibility, if you needed it, of easily creating trusts between domains, using Security Groups from one domain to authenticate on resources in another and so on.
The Citrix farm should not be affected, apart from the fact that the Citrix Servers would obviously need disjoining from their old domain and rejoining to the appropriate child domain on your new network. Provided you have a connection from the Citrix farm to the Citrix domain's DCs (or, preferably, locate at least one DC, which also runs as a GC, in the Citrix farm) you will be able to achieve this.
-tigermatt