Single Forest/Single Domain utilizing OU/Sites - Is it Secure

Posted on 2009-12-18
Last Modified: 2013-12-04
Current Environment:
We have 3 administrators all having the same role (all trusted)

We have 3 separate single forest/single domains (staff.domain, lab.domain, and public.domain) to accommodate 3 separate functional areas (staff, labs and public). Each functional area has no access to the other areas all separated by vlans.  

Each forest/domain has two 2003 server domain controllers.  It was set up initially this way as a way to restrict access from each other.

Staff is made up of one subnet, public has 3 subnets and labs have 2 subnets. Each functional area has own resources and policies.

We are in the process of redesigning network.  We now have Windows 2008 R2.  Without compromising security between the functional areas, is it possible to redesign to create a single forest with a single domain using OUs and sites?   Total objects among all 3 domains are less than 1000.

Most documentation is geared at large geographical companies over WANS.  I am having a difficult time applying to our small environment.  We do not use Exchange.   Any suggestions would be most appreciated.  I can provide additional info.

What would be the pros/cons or if even feasible.
Question by:cspiegel
    LVL 11

    Accepted Solution

    Do you need trusted relationships of any kind between the sites/OUs, or would their functional separation remain intact? It sounds like this, but I wanted to verify.


    Author Comment

    The only thing in common are the administrators.  No shared resources.  
    LVL 11

    Assisted Solution

    You should be all set. All you'll lose is administrative overhead, in my opinion.

    Link for domain migration, if you didn't want to start from scratch...

    Author Comment

    Thanks, I am going to set up some virtual servers and test.  Have to run today but back at it on Monday.  I might have to ask for assistance along the way.  I will start Monday.  Thanks so much, I was a netware girl and am slowly grasping microsoft!
    LVL 11

    Assisted Solution

    No problemo! It's fun to find out....

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Why do Marketing keep bothering you?

    Is your marketing department constantly asking for new email signature updates? Are they requesting a different design for every department? Do they need yet another banner added? Don’t let it get you down! There is an easy way to manage all of these requests...

    Storage devices are generally used to save the data or sometime transfer the data from one computer system to another system. However, sometimes user accidentally erased their important data from the Storage devices. Users have to know how data reco…
    Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
    This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    760 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    8 Experts available now in Live!

    Get 1:1 Help Now