7. Step 4: Select the Forest Root Domain
The first domain deployed in an Active Directory forest is called the forest root domain. This domain remains the forest root domain for the life cycle of the Active Directory deployment. It cannot be changed without redeploying the entire forest.
The forest root domain contains the Enterprise Admins and Schema Admins groups. These administrator groups are used to manage forest-level operations, such as the addition and removal of domains and changes to the schema.
A domain that exists in the design can be selected as the forest root, or a dedicated forest root can be selected. Once the forest root domain has been established, it cannot be changed without rebuilding the forest.
Get Windows Server 2008 Active Directory Domain Services now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
