Installing And Managing The Domains, Trees, And Forests

By Author: iris
Total Articles: 286
Comment this article

You can create multiple domains, trees, and forest by using dcpromo and the Active Directory Installation Wizard.
Create multiple domains to meet security requirements mcitp boot camp, meet administrative requirements, optimize replication traffic, or retain Windows NT domains. Create multiple trees if your organization has more than one DNS name. Create multiple forests if you need to secure data or you need to isolate directory replication.
In Windows Server 2003, you can now rename any domain that has domain controllers running Windows Server 2003 and move existing domains to other locations in the domain hierarchy if all domain functional levels in the forest have been raised to Windows Server 2003, and the forest functional level has been raised to Windows Server 2003. Use the domain rename utility (Rendom.exe) to rename or restructure a domain.
You can rename domain controllers without first demoting them if the functional level of the domain to which the domain controller is joined is set to Windows Server 2003. Use the Netdom.exe: Windows Domain Manager com-mand-line ...
... tool, included with the Windows Support Tools on the Windows Server 2003 Setup CD-ROM, to rename a domain controller.
Operations master roles are assigned to domain controllers to perform single master operations. Every Active Directory forest must have the schema master and domain naming master roles. Every domain in the forest must have the RID master a certification cost, the PDC emulator, and the infrastructure master roles. There are two ways to manage operations master roles: transfer and seizure.
A trust relationship is a link between two domains in which the trusting domain honors the logon authentication of the trusted domain. Windows Server 2003 supports the following types of trusts: tree-root, parent-child, shortcut, realm, external, and forest.
Before taking the exam, review the key points and terms that are presented in this chapter. You need to know this information.
Before implementing a forest and domain structure, plan the structure. Create child domains to meet security requirements, meet administrative requirements, optimize replication traffic, or retain Windows NT domains. Create multiple trees if your organization has more than one DNS name. Create multiple forests if you need to secure data or you need to isolate directory replication. You implement an Active Directory forest and domain structure by using dcpromo and the Active Directory Installation Wizard.
The default FSMO role configuration works well for most organizations. In a forest with more than a few domain controllers, or in a forest that spans multiple sites, you might want to transfer the default operations master role assignments to other domain controllers in the domain or forest to balance the load among domain controllers, or accommodate domain controller a+ certification maintenance and hardware upgrades.