Chapter 4 - Designing the Logical Components

Abstract

Standards simplify administration and provide consistency in design. An Active Directory (AD) works well with standardization because of the container structure of its overall design. Enterprise-wide standardization extends beyond the overall internal structure of the AD. Forest-wide standardization affects the top-most container and all of its contents. Domain-wide standardization affects a single domain within the AD and all of its contents, including organizational units (OUs) and possibly sites. Every item within the AD is considered a container or an object. Each item within the AD provides simplified administration by following naming standardization and a standardized structure. The forest is the top-most container within an AD and consequently the seat of its administrative control. The degree of control needed within an AD design will determine whether a single forest or multiple forests should be implemented. OUs are the smallest AD containers. OUs may provide delegated administrative control without providing full-fledged administrative capabilities. OUs should be created for one of the following reasons: delegation of administrative tasks, simplified resource administration, and group policy deployment. The three OU designs that are generally used and advocated by Microsoft are designed by function, geography, and object type.