Solved

Active Directory design

Posted on 2009-07-06
3
199 Views
Last Modified: 2012-05-07
Hi,

We have multiple separate domains throughout the company in different countries and is considering the various possibilities to group them into a single forest.

What is the best way to group all the domains into a single forest?

Thank you.
0
Comment
Question by:bdpsg
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
3 Comments
 
LVL 1

Accepted Solution

by:
sukhijavikas earned 250 total points
ID: 24791998
The best strategy is create
a root domain (which will consist of schema master & domain naming master)
& a child domain(which will consists all other objects)

Now create a trust between the new child domain & other domains
Use admt like tools to migrate all seprate domains to this single domain.
0
 
LVL 27

Assisted Solution

by:Jason Watkins
Jason Watkins earned 250 total points
ID: 24793878
All domains within a single Active Directory forest are connected by two-way transitive trusts.

I would create a domain for the IT groups, and another separate domain for the user objects.  Use a non-Internet resolvable domain name for the internal domain.

company.local
it.company.local
0

Featured Post

U.S. Department of Agriculture and Acronis Access

With the new era of mobile computing, smartphones and tablets, wireless communications and cloud services, the USDA sought to take advantage of a mobilized workforce and the blurring lines between personal and corporate computing resources.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
There are cases when e.g. an IT administrator wants to have full access and view into selected mailboxes on Exchange server, directly from his own email account in Outlook or Outlook Web Access. This proves useful when for example administrator want…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

617 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question