Exam Essentials

Know why a single domain should be used.     This is the easiest model to administer. Because the single domain can support all of the administration models, it can be used in most cases.

Know why a multiple domain structure should be implemented.     If data or service autonomy or data isolation is required, or if specific security policy requirements exist for a division of the company, a multiple domain environment will be required.

Know the different trust types and when to use them.     Forest trusts exist between Windows 2003 functional level forests; shortcut trusts connect two domains (in the same forest) in order to shorten the authentication path ; external trusts can be created in order to tie a domain in an Active Directory forest to a domain in another Active Directory forest or a Windows NT 4 domain; and realm trusts connect UNIX realms to Active Directory.

Identify the interoperability options.     Windows NT 4, Windows 2000 Server, and Windows Server 2003 can all interoperate . The functional levels of the domains and forests will be determined based on what type of domain controllers are in use.

Identify the migration strategy options.     When migrating to Active Directory, the Windows NT 4 domains and Windows 2000 Server Active Directory can be upgraded to Windows Server 2003 Active Directory to maintain the same domain and forest structure, or they can be restructured to take advantage of the new features of Active Directory.

Understand the options when creating a forest root domain.     When creating the forest root domain, the service administrators of the root domain have the ability to modify the Enterprise Admins and Schema Admins groups. To keep other administrative staff from having this level of control, the root domain can be created as a dedicated root with only a small number of administrators.