| Author |
Defining a Forest Root Domain?
|
|
| Tech Ranger 2003-06-17, 10:11 pm |
| On page 137 of the MS Press book, there is a discussion of defining a Forest Root Domain. The options offered are "Designating an existing domain" or "Designating a dedicated domain". I am very confused. I thought that the Forest root domain is ALWAYS the first domain created when you start this whole thing. Can anybody explain. By anybody, I guess I mean Jeff. | |
| jeff_j_black 2003-06-29, 2:36 pm |
| The logical basis of AD is DNS. If existing DNS supports SRV records then you could install AD root there. You could also make a sub domain to the existing zone as the AD root.
An empty root domain is cool to isolate enterprise admin accounts and provide flexibily for adding and removing domains without effecting forest root. | |
| Tech Ranger 2003-06-29, 8:39 pm |
| What does MS mean by designating an existing domain? Doesn't the decision of the Root have to be done at the beginning, when you install AD? | |
| jeff_j_black 2003-06-29, 10:11 pm |
| You could upgrade the existing NT 4.0 domain for example. Again think in terms of a domain being a DNS domain name. You could be running UNIX and use the existing domain. Your UNIX domain: UNIX.com has DNS zones that support SRV records and Dynamic Update. Your first Windows 2000 Server promoted to domain controller in UNIX.com would still be the root AD domain, even though you have UNIX running the DNS. |
|
|
|