Well there are very good scenarios for having separate forests. The main ones are ease for spinning off the business unit and the other one being if you need to have separate administration groups at each location that can't settle for delegated rights.
Thanks, Brian Desmond br...@briandesmond.com c - 312.731.3132 Active Directory, 4th Ed - http://www.briandesmond.com/ad4/ Microsoft MVP - https://mvp.support.microsoft.com/profile/Brian -----Original Message----- From: Steven M. Caesare [mailto:scaes...@caesare.com] Sent: Thursday, August 06, 2009 11:57 AM To: NT System Admin Issues Subject: RE: domain/forest setup question Collapse in to single forest/domain, have DC('s) at each location, and use AD Sites to stipulate subnet on each end of WAN link. Provided your WAN bandwidth allows for this. -sc > -----Original Message----- > From: James Kerr [mailto:cluster...@gmail.com] > Sent: Thursday, August 06, 2009 12:09 PM > To: NT System Admin Issues > Subject: Re: domain/forest setup question > > Overall, I'm always looking to make things easier to manage. > > The new DC is replacing the single DC they have at that location that > is going on 5 years old. When it was the originally put there we did > not have any VPN connection between the two locations. > > The main office has about 80 users and the smaller has about 40 but > will soon be about 50. The server at the moment really only provides > file and print services. WSUS and AV and Exchnage come from the main > location. > At > some point I would like to run a sharepoint for the whole company. > > > ----- Original Message ----- > From: "Steven M. Caesare" <scaes...@caesare.com> > To: "NT System Admin Issues" <ntsysadmin@lyris.sunbelt-software.com> > Sent: Thursday, August 06, 2009 11:27 AM > Subject: RE: domain/forest setup question > > > What are you trying to accomplish: 1)overall, and 2) with the new DC? > > -sc > > > -----Original Message----- > > From: James Kerr [mailto:cluster...@gmail.com] > > Sent: Thursday, August 06, 2009 11:19 AM > > To: NT System Admin Issues > > Subject: domain/forest setup question > > > > I would like to hear some input into an upcoming change I have to > make > > to > > our network. Currently we have two locations each domain is a > separate > > forest but we have domain trusts. The locations are connected via a > VPN > > and > > their both on a separate subnet I'm going to be installing a new DC > at > > the > > smaller location and I'm debating whether I should keep the forests > > separate or same forest different domains or just make the new DC a > > member of our existing domain at the main location. It seems to me > > that adding to > the > > existing domain would be the easiest to manage and probably the best > > way to go right? Any downsides to the last option? > > > > James > > > > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ > <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
