TABLE OF CONTENTS We have looked at the various objects contained within the Active Directory infrastructure and have analyzed the scope of various containers within Active Directory. In this section, we analyze the structure and hierarchy of our Active Directory. We will see how the organizational requirements will affect the decisions regarding forest structure, hierarchy, and naming strategy. We will see how Active Directory name structures and the Domain Name Service (DNS) interact and how this affects naming strategy with single and multiple forests.
As we continue to detail our design requirements, we will see the role that domains play within the AD design. We will also see how domain hierarchy affects the AD namespace. This section also covers domain migration and upgrade designs as well as authentication and trust relationships. Let's begin by taking the highest-level look at Active Directory by analyzing the forest design.
The forest is generally owned by a senior-level IT administrator. This individual is responsible for:
The forest root domain deployment that is used to create the forest. (Forest design was covered in greater detail in Chapter 2)
The first domain controller deployment in each domain that is used to create each domain required for the forest. (Domain design was covered in greater detail in Chapter 2)
Selection and placement of service administrator group members in all domains of the forest.
The design and creation of the OU structure for each domain in the forest. (OU design...
