Skip to main content

Domains, Trees, Forests

Domains, Trees & Forests

image.png

  • Every Domain is part of a Tree, is part of a Forest (even a single domain)
  • Domains which share the parent domain name belong to the same tree
  • Trust Relationships connect domains
  • Forest Root (Root Domain) - First domain, cannot change
    • Enterprise admins control entire forest
    • Domain admins control their domain
  • Trees later merged via forest trust will share resources but not schema
  • Global catalogue is replicated across the whole forest

Active Directory Partitions

image.png

Global Catalog Server

  • Not all Domain Controllers must be Global Catalog Servers
  • All Global Catalogue Servers must be Domain Controllers
  • Ideally have a GCS in every site D.C but adds replication load

Configured in Active Directory Sites and Services > Services > DC > NTDS Settings > Properties > Tick "Global Catalog"

Back to top