Windows Server® 2008 and Windows Server 2008 R2
Active Directory® Domain Services
Published: February 2008
Updated: November 2011
For the latest information, please see www.microsoft.com/ipd
Copyright © 2011 Microsoft Corporation. This documentation is licensed to you under the Creative Commons Attribution License. To view a copy ofthis license, visit http://creativecommons.org/licenses/by/3.0/us/ or send a letter to Creative Commons, 543 Howard Street, 5th Floor, San Francisco, California, 94105, USA. When using this documentation, provide the following attribution: Infrastructure Planning and Design is provided with permission from Microsoft Corporation.
This documentation is provided to you for informational purposesonly, and is provided to you entirely "AS IS". Your use of the documentation cannot be understood as substituting for customized service and information that might be developed by Microsoft Corporation for a particular user based upon that user’s particular environment. To the extent permitted by law, MICROSOFT MAKES NO WARRANTY OF ANY KIND, DISCLAIMS ALL EXPRESS, IMPLIED AND STATUTORYWARRANTIES, AND ASSUMES NO LIABILITY TO YOU FOR ANY DAMAGES OF ANY TYPE IN CONNECTION WITH THESE MATERIALS OR ANY INTELLECTUAL PROPERTY IN THEM.
Microsoft may have patents, patent applications, trademarks, or other intellectual property rights covering subject matter within this documentation. Except as provided in a separate agreement from Microsoft, your use of this document does not give you anylicense to these patents, trademarks or other intellectual property.
Information in this document, including URL and other Internet website references, is subject to change without notice. Unless otherwise noted, the example companies, organizations, products, domain names, email addresses, logos, people, places and events depicted herein are fictitious.
Microsoft, Active Directory, Forefront,Outlook, SharePoint, Windows, Windows NT, Windows PowerShell, and Windows Server are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries and regions.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
You have no obligation to give Microsoft any suggestions, comments orother feedback (“Feedback”) relating to the documentation. However, if you do provide any Feedback to Microsoft then you provide to Microsoft, without charge, the right to use, share and commercialize your Feedback in any way and for any purpose. You also give to third parties, without charge, any patent rights needed for their products, technologies and services to use or interface with anyspecific parts of a Microsoft software or service that includes the Feedback. You will not give Feedback that is subject to a license that requires Microsoft to license its software or documentation to third parties because we include your Feedback in them.
The Planning and Design Series Approach 1
Introduction to Active Directory Domain Services Planning and Design 2
Step 1: Determine theNumber of Forests 6
Step 2: Determine the Number of Domains 9
Step 3: Assign Domain Names 12
Step 4: Select the Forest Root Domain 14
Step A1: Design the OU Structure 16
Step B1: Determine Domain Controller Placement 18
Step B2: Determine the Number of Domain Controllers 20
Step B3: Determine Global Catalog Placement 22
Step B4: Determine Operations Master Role Placement 26
Step C1:Create the Site Design 28
Step C2: Create the Site Link Design 30
Step C3: Create the Site Link Bridge Design 33
Step D1: Determine Domain Controller Configuration 35
Appendix A: Design Job Aids 39
Appendix B: IPD in Microsoft Operations Framework 4.0 41
Appendix C: Active Directory Domain Services in Microsoft Infrastructure Optimization 42
Version History 43