Link to home
Start Free TrialLog in
Avatar of etur
eturFlag for United States of America

asked on

Active Directory Design Strategy - Child Domain versus OU

1) What are the pros and cons using ROOT DOMAIN>CHILD DOMAIN>OU'S versus ROOT DOMAIN>OU'S for individual sites in active directory?

2) Does one model scale better than the other?

3) Does one model work better for "absorbing" newly purchased companies and their domains?

4) Is one model more "secure" than the other - how so?

5) What model do you use/prefer and why?


Background: We are a growing company with nine sites that currently use a single root domain with sub-ou's for each site and then users, computers etc. The goal is to have each site have an IT team to manage their own users, computers etc. and group policy to be managed centrally. We would like to avoid having the site IT teams be domain admins.

I am looking for as detailed answers as possible please. I also know there may be no "correct" answer to some of these questions. I am looking for pros/cons and opinions. I will award points based on how detailed and how compelling your argument is.

Thanks all!
ASKER CERTIFIED SOLUTION
Avatar of Mike Kline
Mike Kline
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of etur

ASKER

Since I would be the only domain admin, I guess I would only have to worry about me then?
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of etur

ASKER

Chev,
Do you have a link to that BP whitepaper and maybe some others?
Thanks!
Avatar of etur

ASKER

Not as much detail as I had asked for but good info.