O'Reilly logo

Automating Active Directory® Administration with Windows PowerShell® 2.0 by Laura E. Hunter, Ken St. Cyr

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Manage AD Domains

When planning your AD environment, the number of forests and domains you select will be based on the security and administrative requirements of your organization. Within AD, the AD forest constitutes the security boundary within AD—AD administrators from one forest can't exert administrative privileges within a separate AD forest (unless a trust relationship is in place). Conversely, if you have multiple domains within a single AD forest, the Enterprise Admins group in the forest root domain has default administrative privileges across the entire forest, including all child domains. In fact, Domain Admins in any child domains can potentially (although not by default) escalate their privileges so that they can access any domain ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required