Having the capability to connect forests via trusts makes an administrator realize that there were things that were taken for granted in a single forest model. Address lists for Exchange don't automatically list all the users in the other forests. Applications that fed their own databases from Active Directory won't automatically know about the objects in the other forest either. Additional tools will be needed to keep these multiple directories in sync. Using GALSync to Do Directory SynchronizationsThe new version of Microsoft Metadirectory Services, 3.0, now called Microsoft Identity Integration Server, contains a simplified method for keeping the Global Address Lists of multiple forests in sync. GALSync replicates e-mail “specific attributes of user objects and distribution groups between forests to maintain a homogenized view of mail users from multiple forests. Microsoft Identity Information ServicesMicrosoft Identity Information Services offers significant flexibility in replicating identity data between forests. Any attributes on any objects in the Active Directory can be replicated to another forest or most any other foreign directory. |