O'Reilly logo

Microsoft® Windows® Security Resource Kit, Second Edition by The Microsoft Security Team, Brian Komar, Ben Smith

Stay ahead with the world's most comprehensive technology and business learning platform.

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, tutorials, and more.

Start Free Trial

No credit card required

Designing Forests for Active Directory Security

The forest is the largest management unit of Active Directory as well as the ultimate unit of autonomy and isolation of authority. Active Directory design begins with answering the question, “How many forests will my organization require?” The answer to this question is based on security considerations for autonomy and isolation of authority. Characteristics of forests and security considerations that can affect your design include the following:

  • Enterprise administration boundaries and isolation of authority

  • Default permissions and schema control

  • Global Catalog boundaries

  • Domain trust requirements

  • Domain controller isolation

Enterprise Administration Boundaries and Isolation of Authority

The forest ...

With Safari, you learn the way you learn best. Get unlimited access to videos, live online training, learning paths, books, interactive tutorials, and more.

Start Free Trial

No credit card required