Windows® 2000 Active Directory™

When to Use Multiple Trees

Many of the issues previously described regarding multiple domains in a single tree also hold true for multiple domains and trees in a single Forest. All the trees in a Forest share a common schema and a common security context, through a two-way, transitive trust with the root domain for the Forest. The sharing of a common schema, common configuration information, and a common security environment is what distinguishes a Forest from a set of unrelated domain trees. However, some differences between a single tree and multiple trees in a Forest might drive organizations to consider the implementation of a Forest.

Discontiguous Namespace

Perhaps the greatest motivating factor in considering the implementation of ...