none
Option "Domain tree in an existing forest"

    Question

  • Hello,

    I was wondering what is this option for: "Domain tree in an existing forest" during the AD Promotion Wizard.

    How could be used and what would be the benefits of choosing such option?

    any example?

    Thank you very much!

    Tuesday, August 24, 2010 3:17 PM

Answers

  • Not surprisingly, it allows you to create another domain tree in the existing forest. Effectively, you will have a non-contiguous domain namespace in the same forest (e.g. domain1.com and domain2.com - rather than domain1.com and domain2.domain1.com). More at http://support.microsoft.com/kb/310996

    As the article explains, this might be done in order to mirror pre-existing DNS namespace - but in general, I don't see a compelling reason to use it in new implementations...

    hth
    Marcin

     

    • Proposed as answer by Mike Kline Tuesday, August 24, 2010 3:27 PM
    • Marked as answer by FortyWinks Wednesday, August 25, 2010 7:16 AM
    Tuesday, August 24, 2010 3:26 PM
  • If your environment uses multiple DNS namespaces and you need to integrate them into the same design, multiple domain trees in a forest model is the answer. Contrary to popular misconception, integration of these namespaces into a single AD forest can be done through the use of multiple trees that exist in one forest. One of the most misunderstood characteristics of Active Directory is the difference between a contiguous forest and a contiguous DNS namespace. Many people do not realize that multiple DNS namespaces can be integrated into a single Active Directory forest as separate trees in the forest.

    Example : Lets say you have a local county governmental organization and the independent city offices such as the police and fire departments that are spread out around the city. Each office currently uses a DNS namespace for name resolution to all hosts and user accounts local to itself, which provides different e-mail addresses for users located in the fire department, police department, and other branches. You can merge everyone into one whole forest using the “multiple domain trees in a forest model”. Yes, one should think "why such setup ?", but from the administration point of view, it is a valid option.

    • Marked as answer by FortyWinks Wednesday, August 25, 2010 7:16 AM
    Tuesday, August 24, 2010 4:13 PM

All replies

  • Not surprisingly, it allows you to create another domain tree in the existing forest. Effectively, you will have a non-contiguous domain namespace in the same forest (e.g. domain1.com and domain2.com - rather than domain1.com and domain2.domain1.com). More at http://support.microsoft.com/kb/310996

    As the article explains, this might be done in order to mirror pre-existing DNS namespace - but in general, I don't see a compelling reason to use it in new implementations...

    hth
    Marcin

     

    • Proposed as answer by Mike Kline Tuesday, August 24, 2010 3:27 PM
    • Marked as answer by FortyWinks Wednesday, August 25, 2010 7:16 AM
    Tuesday, August 24, 2010 3:26 PM
  • If your environment uses multiple DNS namespaces and you need to integrate them into the same design, multiple domain trees in a forest model is the answer. Contrary to popular misconception, integration of these namespaces into a single AD forest can be done through the use of multiple trees that exist in one forest. One of the most misunderstood characteristics of Active Directory is the difference between a contiguous forest and a contiguous DNS namespace. Many people do not realize that multiple DNS namespaces can be integrated into a single Active Directory forest as separate trees in the forest.

    Example : Lets say you have a local county governmental organization and the independent city offices such as the police and fire departments that are spread out around the city. Each office currently uses a DNS namespace for name resolution to all hosts and user accounts local to itself, which provides different e-mail addresses for users located in the fire department, police department, and other branches. You can merge everyone into one whole forest using the “multiple domain trees in a forest model”. Yes, one should think "why such setup ?", but from the administration point of view, it is a valid option.

    • Marked as answer by FortyWinks Wednesday, August 25, 2010 7:16 AM
    Tuesday, August 24, 2010 4:13 PM