Option 2: Dedicated Forest Root Domain
A dedicated forest root domain, also known as an empty forest root, may be added to the existing domain structure to specifically manage the forest level functions. When selected, this domain does not contain any user accounts or resources other than the service administrator accounts for the forest root domain, and it does not represent any region in the domain structure. All domains become children of this domain.
A dedicated forest root is generally chosen for the following reasons:
Operational separation of forest service administrators from domain service administrators.
Protection from operational changes in other domains.
Serves as a neutral root so that no region appears to be subordinate to another ...
Get Windows Server 2008 Active Directory Domain Services now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
