Skip to main content

Domains, Trees, Forests

Domains, Trees & Forests

image.png

  • Every Domain is part of a Tree, is part of a Forest (even a single domain)
  • Domains which share the parent domain name belong to the same tree
  • Trust Relationships connect domains
  • Forest Root (Root Domain) - First domain, cannot change
    • Enterprise admins control entire forest
    • Domain admins control their domain
  • Trees later merged via forest trust will share resources but not schema
  • Global catalogue is replicated across the whole forest

Active Directory Partitions

image.png