Just want to quickly say thanks to both of you, Joe and Al, you've helped me form some thoughts around this area that I can work with. This short discussion has been very useful. If I ever see either of you at a MVP gathering I owe you a beverage of your choice, or two.
-- Robert Moir Microsoft MVP for Windows Servers & Security Senior IT Systems Engineer Luton Sixth Form College Right vs. Wrong | Good vs. Evil God vs. the devil | What side you on? > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:ActiveDir- > [EMAIL PROTECTED] On Behalf Of joe > Sent: 12 June 2006 15:57 > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] AD integration > > The answer to this one is of course it depends. > > At first blush it sounds like a single threaded app. Depending on the > vendor, this may be the best/safest thing to do. :) > > As for best practices. I don't think there are any best practices for > how many domains you should pull data from at a time. It would again > depend entirely on the app and what it is supposed to be doing and the > dangers exposed in doing it. > > For a "relatively" fast application that works well in single and > multidomain environments I could see cases where it is better to pull > from the GC or better to set up a thread pool and pull from x domains > at once or a combination. Certainly the thread pool solutions are the > more scalable solutions but they are also the much harder to do right > and the more costly solutions. Most customers chose apps on how cheap > they are first, then later they start to realize the shortcomings that > made them cheaper. > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Rob MOIR > Sent: Monday, June 12, 2006 8:31 AM > To: ActiveDir@mail.activedir.org > Subject: [ActiveDir] AD integration > > Just a quick question. Is anyone aware of any "best practice" > documentation of how a product ought to integrate with AD (e.g. to pull > out user data for its own use). > > Failing that, can anyone comment on what they think of a model that can > only pull data out of one domain at a time so for a >1 domain forest > needs to make a connection to each domain in turn, pull down that > information and then load it into SQL server. Am I crazy in thinking > that anyone following this model has probably just found out that their > old NT4 domain integration code "kinda works" and did the bare minimum > tidying up before halting any further work? > > -- > Robert Moir > Microsoft MVP for Windows Servers & Security Senior IT Systems Engineer > Luton Sixth Form College > Right vs. Wrong | Good vs. Evil > God vs. the devil | What side you on? > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ml/threads.aspx List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ml/threads.aspx
