Skip to main content

Domains, Trees, Forests

Domains, Trees & Forests

image.png

  • Every Domain is part of a Tree, is part of a Forest (even a single domain)
  • Domains which share the parent domain name belong to the same tree
  • Trust Relationships connect domains
  • Forest Root (Root Domain) - First domain, cannot change
    • Enterprise admins control entire forest
    • Domain admins control their domain
  • Trees later merged via forest trust will share resources but not schema
  • Global catalogue is replicated across the whole forest

Active Directory Partitions

image.png

Global Catalog Server

    Not all Domain Controllers must be Global Catalog Servers All Global Catalogue Servers must be Domain Controllers Ideally have a GCS in every site D.C but adds replication load

    Configured in Active Directory Sites and Services > Services > DC > NTDS Settings > Properties > Tick "Global Catalog"

    Back to top