Chapter 8. Designing a Domain Tree

Terms you'll need to know:

• External trust

• Kerberos

• Key Distribution Center (KDC)

• Shortcut trust

• Transitive trust

Techniques you'll need to master:

• Determining the business requirements for creating a multiple-domain structure

• Identifying the three types of trust relationships in Active Directory

• Describing the process of authentication between domains

• Determining the business requirements for a multiple-tree structure

• Determining the business requirements for a multiple-forest environment

Chapter 7, "Designing a Domain," discussed the single-domain model, which is usually the recommended model when designing an Active Directory infrastructure. However, in some instances a single-domain model will not meet a business's requirements. In cases such as this, a multiple-domain structure is necessary. Before designing a multiple-domain structure, you need to understand how an Active Directory structure with more than one domain functions. The following topics are covered in this chapter to assist you in designing this type of structure:

• Determining business needs

• Planning domain trees

• Domain design issues

• Multiple-tree forests

• Multiple forests

Also refer to the previous page for a list of key terms and concepts that are important for this chapter.