Are less domains better than more domains in active directory?

Posted by johnny on Server Fault See other posts from Server Fault or by johnny
Published on 2010-04-06T15:38:52Z Indexed on 2010/04/06 15:43 UTC
Read the original article Hit count: 245

Filed under:

active-directory

|

windows-domain

A colleague of mine wants to add a domain to our forest. He said it would be good for security. I believe him but I have no idea why it is any better than with just one domain. I read this on Wikipedia but it has no source:

"Microsoft recommends as few domains as possible in Active Directory and a reliance on OUs to produce structure and improve the implementation of policies and administration."

I have no idea if it's right or not. I was hoping for comments.

Thank you.

© Server Fault or respective owner

Related posts about active-directory

Can't join OS X Mavericks to AD Domain

as seen on Server Fault - Search for 'Server Fault'
I'm attempting to join an OS X Mavericks (10.9) client to a Windows Server 2008 Active Directory domain, however the bind fails with this error in the OS X client's system.log: Oct 24 15:03:15 host.domain.com com.apple.preferences.users.remoteservice[5547]: -[ODCAddServerSheetController handleOtherActionError:… >>> More
Retrieve user details from Active Directory using SID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her SID. I don't want to rely on other attributes, since I am trying to detect changes to these. Example: I get a message about a change to user record containing: Message: User Account Changed: Target Account Name: test12 Target… >>> More
Retrieve user details from Active Directory using GUID

as seen on Server Fault - Search for 'Server Fault'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Retrieve user details from Active Directory using GUID [closed]

as seen on Super User - Search for 'Super User'
Hi, How can I find a user in my AD when I have his/her GUID. I don't want to rely on other attributes, since I am trying to detect changes to these. >>> More
Office365 DirSync Active Directory Integration

as seen on Server Fault - Search for 'Server Fault'
I am preparing to deploy Office365 for my organization. We have an on premise Active Directory Domain Controller (Windows Server 2012 R2). We would like to leverage our Active Directory for: automatic user provisioning in Office365, and password synchronization, using the DirSync tool. Our Active… >>> More

Related posts about windows-domain

Cancel Windows Domain Membership durin Suse installation

as seen on Super User - Search for 'Super User'
Hi, I am installing SUSE 11.2, and went with the default options, now it reached the point of "Windows Domain Membership". At job I do not remember the right names, so I tried some but I get an error message which says "cannot use the group "WORKGROUP" for Linux authentication", etc. So I would… >>> More
Cancel Windows Domain Membership durin Suse installation

as seen on Server Fault - Search for 'Server Fault'
0 vote down star Hi, I am installing SUSE 11.2, and went with the default options, now it reached the point of "Windows Domain Membership". At job I do not remember the right names, so I tried some but I get an error message which says "cannot use the group "WORKGROUP" for Linux authentication"… >>> More
Windows Domain Controller: Create a test environment from a production environment

as seen on Server Fault - Search for 'Server Fault'
I need to create a working test environment of a domain we have. I need to have all the data from the production environment in the test environment. What is the best way to go about doing this? Here are some ideas I have but I am not sure if there is a better/recommended way of doing this. Use… >>> More
Why is the DNS on my Windows Server 2012 not authoritative according to dig?

as seen on Server Fault - Search for 'Server Fault'
This is me trying to understand something rather than a real problem. I have a new Windows Server 2012 Essentials. That server provides, DNS, DHCP etc. Lets say my Windows domain is my-windows-domain and the server's host name is my-server. The domain's DNS zone is my-windows-domain.local. The server's… >>> More
Granting rights to Windows domain Users in Ubuntu?

as seen on Stack Overflow - Search for 'Stack Overflow'
I've connected an Ubuntu 9.10 server to my Windows domain with Likewise Open. I am able to log into the server with my domain account (as DOMAIN\user), but my administrative rights don't carry over. How can I grant admin rights to domain user accounts? >>> More