Home / server / Questions / 472251
In Process
GurdeepS
Asked: 2013-01-25 17:43:12 +0800 CST

Would this be a good reason for child domains?

  • 772

I am building out a sharepoint environment, which would have dev/prod domains. However, I will also be hosting a number of infrastructure servers in the network such as WSUS, DHCP, WDS, etc.

I am thinking that I can create two child domains under a parent domain called say INFRASTRUCTURE, which comprise of the respective dev and prod sharepoint environments.

Is there any flaw in this design? It's either this or 3 seperate flat domains under the forest.

Thanks

active-directory

1 Answers

  1. Domains in the same forest are management boundaries. Separate forests are security boundaries.

    If your concern is management, use separate domains (child or disjoint doesn't matter much). If your concern is security, use separate forests with a trust if necessary. If your concern is neither, you probably don't need a separate domain. We can't answer this for you.

    • 5