Solved

Is the first domain created in active directory always the Forest Root?

Posted on 2014-03-25
4
771 Views
Last Modified: 2014-04-08
When creating the first domain in active directory, it is set as the forest root.

Can a second domain created after the first be converted to now act as the forest root.

For example:

Domain 1: test.ad.example.com

Domain 2: ad.example.com
0
Comment
Question by:elchermans
  • 2
4 Comments
 
LVL 57

Expert Comment

by:Mike Kline
Comment Utility
No unfortunately  you can't  change the root
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
Comment Utility
You cannot restructure forest root domain, its by design

However you can have tree root domain which will be having different name space in same forest

You can use the domain rename process to reposition any domain in the domain tree hierarchy of a forest, with the exception of the forest-root domain. Remember that although you can rename the forest root domain (you can change its DNS and NetBIOS names), you cannot reposition it in such a way that you designate a different domain to become the new forest root domain.

http://technet.microsoft.com/en-us/library/cc738208(WS.10).aspx

Mahesh.
0
 
LVL 8

Expert Comment

by:N-W
Comment Utility
You can reposition any domain in the forest except for the forest root domain. Although you can't reposition the forest root domain, you can rename it.

So if you haven't already created "ad.example.com" (or you can delete it), you could rename your forest root domain to be "ad.example.com" and then create the child domain "test.ad.example.com".
0
 
LVL 35

Expert Comment

by:Mahesh
Comment Utility
There are limiting factors as well you must be aware before proceeding domain rename

If you have Exchange 2007 \ 2010 deployed, you simply cannot rename domain

Domain rename is supported in a forest in which Exchange Server 2003 with Service Pack 1 (SP1) is deployed. However, domain rename is not supported in an Active Directory forest in which Exchange 2000 Server is deployed. When the domain rename tool detects this condition, it will not proceed with the domain rename process.

Also if you have any AD integrated applications where domain name is hardcoded (very rare case) , those applications will not work after rename

Mahesh.
0

Featured Post

How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

Join & Write a Comment

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
This tutorial will walk an individual through the process of configuring basic necessities in order to use the 2010 version of Data Protection Manager. These include storage, agents, and protection jobs. Launch Data Protection Manager from the deskt…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

763 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now