Eric Hummel
asked on
Rebuilding Active Directory Domains
We have been asked to rebuild our active directory domain and we need guidance. We are being asked to build out a multi-tree domain structure now. We just bought 3 companies and each company needs to be a tree in a forest. We want an AD root level domain and we want each of our companies (including ours) to be one of the trees. We DO have an Exchange organization in our domain currently, but the other companies use Gmail.. When we are finished, they will reside on our Exchange organization. We really don't have a good idea of what we need to do, so I'm hoping that someone can provide some insight on how to do this and what steps should be done in what order. We have enough hardware to employ AD sites & Services and have a controller at each site. These sites are all connected via MPLS connections, so connectivity is reliable and fast. I also should mention that 2 of the domains we currently have use a .local for top level domain, so we will likely want to build out a completely new AD structure, as we do not want these .locals in our environment.
Lee W, MVP
Why do you think you need multiple domains? When Microsoft first released AD in Windows 2000 it was STRONGLY recommended to FLATTEN the network - as few domains as possible. In general, you want ONE domain, properly structured with OUs that can be DELEGATED to local IT operations staff.
ASKER
It was felt like with a Single Forest Multi-domain model, it would be much easier to snap in future companies that we purchase.
How is that easier? You have to build a domain for a future company and then build a second DC (increasing licensing costs) for redundancy.
Plan your OU structure appropriately and then all you have to do is create accounts and migrate users to your domain. And as necessary delegate management authority over that OU.
Plan your OU structure appropriately and then all you have to do is create accounts and migrate users to your domain. And as necessary delegate management authority over that OU.
When you acquire companies, you may be able to temporarily setup a trust (unless the acquired company has an SBS/Essentials/Foundation based network which doesn't permit trusts anyway.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.