Trees

When you add another domain to your enterprise and it is a child domain of the first domain, you are essentially creating a tree. These domains are connected through a Kerberos transitive trust. The tree model is such that the name of the tree is always the name of the root of the tree. In Figure 11.1, for example, the tree name is fis.local.

Tip

The namespace you choose for your tree must match your DNS namespace. If you want to create a tree namespace and use a namespace that does not currently exist in your DNS, you can create a new DNS namespace with Windows 2000 DNS. For more information on DNS namespaces, see Chapter 7, "DNS and AD Namespaces."

One of the characteristics of a tree is that it shares a contiguous namespace with other ...

Get Special Edition Using Microsoft Active Directory now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.