My company is contemplating design of Active Directory. Key design consideration is Single or Multiple Forest? There is no regulatory or customer requirements that prevents single Forest implementation.
My suggestion is to utilize Single Forest for operational efficiencies in support of reduced cost and all the security considerations will be in place single or multiple forest. In addition, single forest will allow better integration of the enterprise and support collaboration. Would any one be able to provide me hard numbers or point me in the right direction where I can obtain information on cost expectations of Dual Forest implementation? Some parties seems to think we should go dual forest because of security risks of an Enterprise Adminsitrator hijacking the entire forest. Single or Dual Forest, my plan is to delegate administrators domain capabilities and lock the Enterprise Admin password in a safe place.
I am not sure if the camp advocating Dual Forests have thought the cost implications through. I will appreciate any information that will provide me with a good cost breakdown of dual forests implementation vs single forest taking into considerations scalability, flexibility, security and ease of administration including enterprise integration.