Chapter 3: Designing theActive Directory Forest Structure

MICROSOFT EXAM OBJECTIVES COVERED IN THIS CHAPTER:

• Analyze security requirements for the Active Directory directory service.

  • Analyze current security policies, standards, and procedures.

  • Identify the impact of Active Directory on the current security infrastructure.

• Design the Active Directory infrastructure to meet business and technical requirements.

  • Create the conceptual design of the Active Directory forest structure.

In the previous chapter, we took a look at the information that needs to be collected from the existing environment. Using this information, we are able to discern how the new infrastructure should be designed. Throughout the remainder of this text, we will continue referring back to the current infrastructure so that you can understand exactly what you need to have put in place as well as decide upon what is the highest priority when you are making trade-offs.

Now that we have identified the current requirements and examined the current business environment, it is time to start developing a design for the company s forest and domain structure. You have to gather and study the options you need in order to make informed decisions concerning how many forests are required for an organization and how the domain structure is created within each forest. You will encounter several design options, and you will need to investigate the options that make the design efficient and secure. This chapter starts the discussion and is based on the forest design. Chapter 4, Designing the Active Directory Domain Structure, follows this with a discussion of the domain design.