Creating Multiple Forests

By Author: Mike Jones
Total Articles: 256

Because Windows Server 2003 domains in a forest share a single schema, configuration container, and global catalog, and are linked by two-way transitive trusts, you should strive to have only free 70-291 test questions for your organization. Ideally, the use of multiple forests should be temporary and reserved for situations such as a merger, acquisition, or partnership where two or more organizations must be joined. By defining multiple forests, you add substantial administrative and usability costs to your organization.
Reasons to Create Multiple Forests
Although you should strive to define only one forest for your organization, there are some situations that might warrant the creation of multiple forests. You might need to consider creating multiple forests if you need to:
Secure data Sensitive data can be protected so that only users within that forest
can access it, such as a situation where business units must be separately maintained or when there is a need to isolate the schema, configuration container, orglobal catalog.
Isolate directory replication Schema changes, configuration changes, and the addition of new domains to a forest affect only that forest. Accommodate development/lab environments New or test environments that may not yet be ready for production can be isolated from the rest of the organization.

If you want to separate business units or keep specific users from MCSA required exams accessing resources and you cannot achieve this through your domain or OU structure, a multiple forest model can be an effective tool for creating privacy and security.
You can install Active Directory using the Active Directory Installation Wizard by using an answer file to perform an unattended installation, by using the network or backup media, or by using the Configure Your Server Wizard.
The Active Directory Installation Wizard is the main tool used to install Active Directory. You use the dcpromo command to start the Active Directory Installation Wizard.
You can create an answer file to run the Active Directory Installation Wizard. The answer file can be a part of the answer file used to install Windows Server 2003, or it can install only Active Directory and run after Windows Server 2003 Setup is complete. You can use the network or backup media to install Active Directory on additional domain controllers for an existing domain.
You can remove Active Directory from an existing domain controller and demote it to either a stand-alone server or a member server by using the
MCSE study guides free download dcpromo command.