General discussion

Locked

Flat or tree structured zone structure

By Bob123 ·
We are about a year way from implementing Windows 2000. We have structured our compnay so that each of the three geographic locations has it's own zone. To ease administration we are wondering if it would make sense to collapse this structure into one zone for the whole company, but are unsure of the impact on a Windows 2000 implementation (Site replication etc.)

This conversation is currently closed to new comments.

5 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Flat or tree structured zone structure

by Mostakim In reply to Flat or tree structured z ...

Here we did it, we did not face any major or minor impact, we have single Forest and under that we have all the zone, using Active Directory for local/zonal user administration.
Your root zone must be a internet domain like yourdomain.com and nameserver would be looks like dns1.yourdomain.com
Other will be zone.dns1.yourdomain.com, all the zone will forward request to the root dns server, what have the authority for internet. The zone replication topology would be created automatically by Win2k.

Collapse -

Flat or tree structured zone structure

by Bob123 In reply to Flat or tree structured z ...

Poster rated this answer

Collapse -

Flat or tree structured zone structure

by rkelly In reply to Flat or tree structured z ...

Bob,

making each of your geographical regions a seperate zone (or Domain) should not cause you any issues. In terms of DNS functionality there is no fundamental difference, the major difference that you will notice will be in Active Directory replication. AD only sends updates to domain controllers in the same domain - so if, for sake of arguement, you had a NorthWest regional domain and you created a new user, that user would only be replicated to domain controllers within that domain.

However, you must be aware that is you install all of your domains in the same forest (and with the scenario above you will do) all your domains will share a Global Catalog. This GC conatins some of the information about ALL of the objects in all of the domains in your forest. So there will still be some replication traffic between your geographical regions, but compared to having full AD updates it will be minor.

In terms of ease of administration it depends how your IT Administrative function takes place if you seperate your domains by geographic region then you will administer your AD by those regions. You can then sub devide the regions by using Organistaional Units which will allow you to seperate office/functions within the regions that will manage themselves.

Collapse -

Flat or tree structured zone structure

by Bob123 In reply to Flat or tree structured z ...

Poster rated this answer

Collapse -

Flat or tree structured zone structure

by wcraigmiles In reply to Flat or tree structured z ...

The best way to treat this is as a real directory structure. Create one forest. Create either multiple root domains in that forest or create one root OU and then have the geographic areas represented by a child OU under that.

There is a good ADbook, it is called the Active Directory Bible and is pub lished by IDG. Very good reference.

The critical point here is to get the terms correct. Windows with AD not takes the word domain and trys to map the NT domain idea over DNS and then stretch it over a directory structure like LDAP, X.500 or NDS. It doesn't quite fit.

You can leave the zones the way the are and plan on implementing the DNS around the AD structure until you can actually integrate the DNS into the AD system. With 2000 and AD, Microsoft has create a fourth type of DNS record called AD integrated. It is only available if you use windows 200 as your DNS and DHCP server.

We've done several migrations, large and small, and if you want you can shoot me some of your questions and try to work out a framework solution that you can fill in the details and have at it.

Back to Networks Forum
5 total posts (Page 1 of 1)  

Related Discussions

Related Forums