Windows Forum

Ask something
Discussion Locked

AD Tree or Forest??

0 helpful
7 replies

by naga64

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

I am managing 2 separate domains for a parent company that has 2 separate companies. Neither company will share resources. But I would like to manage it from a single point. What would be the best way to migrate these 2 NT domains to 2000 and AD? Should they be on two separate domains completely or two seperate forests or trees? They are connected by a dedicate line (256k) and would only be used for Internet access (one site has a T1 to the internet).

Any help would be appreciated.

7 replies

by timwalsh

While there may not be any resource sharing between the 2 child companies, is there any sharing between a child company and the parent company? Are you also managing a domain for the parent company?

Is there any intent for the child companies toshare namespace with the parent company (parent company = parent.com; child companies = child1.parent.com/child2.parent.com)?

Do you plan on managing the domains from one of the 2 stated locations or from a third location (parent company site)? If from a third site, what type of connectivity do you have to the Internet?

by naga64

There is really no parent company. The two domains (A & B) are equivalent in their heirarchy of the company but I will be managing them both . I login to Domain A and if possible would like to manage both under Active Dir. So i am open as to how thestructure should be. Is a parent domain necessary with multiple OUs under it or should I have separate Forests so I can just switch domains for management?

There will be no namespace sharing what so ever.

One thing though, I have an Exchange server that hosts both domains (internet not NT). Domain A (NT) is where the exchange server sits and the end users authenticate through the NT login. Domain B is trusted and have identical user ID and passwords.

Network looks something like this

(DOMAIN B)---256k--->DOMAIN(A)---T1--->(INTERNET)

I currently manage domain B thu remote control.

My internet access is a full T1 (1.5mbps)

by avswamy

you can do this with creating trust relation ship with both domains, then you can manage both domains at one login account. i hope this will help you.

by avswamy

create ad in each domain and create trust relation ship with both domains, then you can login into any one of the domain which is trusted by other domain so you can do what ever you, because you are the administrator for the both domains.

This discussion is closed to new replies.