Best Practice Active Directory Design for Managing Windows Networks 3
On This Page 4
Introduction 4
Active Directory Deployment Scenarios 4
Active Directory for Windows Network Management 5
Special Considerations for Branch Office Deployments 5
Special Considerations for Exchange 2000 Deployments 6
About this Guide 6
The Best Practice Approach 6
The Scope of this Document 6
Project Roles 8
Project Architect 8
Project Manager 8
Active Directory Design: Key Concepts 9
Logical Models 9
Physical Models 10
Part I: Determining the Number of Forests in Your Organization 10
Determining the Number of Forests for Your Organization 10
The Role of Forests in Windows Network Designs 10
Elements of Determining the Number of Forests 12
Comparing Service and Data Ownership 12
Analyzing the Forest Owner Role 13
Table 2 Roles and Responsibilities of the Forest Owner 13
Relationship between Service Owner Roles 14
Best Practice Forest Models 14
Single Forest Model 15
Forest Design Process 16
Assigning Forests 17
Participating in a Single or Subscription Forest 17
Table 5 Characteristics of a Shared Forest 18
Creating Your Own Forest 19
Delegating the Next Steps to the Forest Owners 21
Part II: Creating the Forest Design 21
Creating a Domain Design 21
The Role of Domains in Windows Network Designs 21
Contrasting Windows NT and Active Directory Domains 22
Elements of a Domain Design 23
The Domain Owner Role 23
Best Practice Domain Design 24
Dedicated Forest Root Domain 24
Single, Global Child Domain 25
Domain Design Process 26
Designing the Forest Root Domain 27
Selecting the Single Global or Regional Domain Model 29
Dividing the Global Organization into Regional Domains 30
Evaluating Current Master User Domains in a Region 34
Designing New Regional Domains 35
Example of Specifying New or Upgraded Domains 35
Consolidating Windows NT Resource Domains 37
Creating a DNS Design for Active Directory 39
The Role of DNS in Windows Network...