Evaluating the Characteristics
| Complexity | ||
| One forest | A single forest is the entry point for a deployment of Active Directory; complexity cannot be reduced. | Low |
| Multiple forests | Second and subsequent forests add to the overall complexity of the environment. | High |
| Cost | ||
| One forest | A single forest is the most inexpensive choice because it requires less hardware, software, and administrative support. | Low |
| Multiple forests | Hardware, software, and administrative considerations increase the cost for each forest that is added to the design. | High |
| Security | ||
| One forest | The forest is the security boundary, and the forest administrator has access to all resources within the forest. | → |
| Multiple forests | Security responsibilities are granted ... | |
Get Windows Server 2008 Active Directory Domain Services now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
