Option 1: Single Forest
When considering the overall design of Active Directory, a single forest implementation is the default.
A best practice is to start with a single forest and let business requirements justify any additional forests.
For extremely large directories, replication could become an issue. Whereas domains are used to partition the directory data and control replication of domain-centric information, forest-wide information—which includes configuration data, schema, and global catalog data—must be replicated.
Get Windows Server 2008 Active Directory Domain Services now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
