Hello and welcome to CertForums.co.uk, here we host free active certification forums with links to the best free resources for Microsoft's MCSA MCSE MCDBA Cisco's CCNA CCDA and CCNP, and CompTIA's A+ Network+ i-NET+ and Security+ certifications in the UK. If you wish to post or use other advanced features you will need to register first. Registration is absolutely free and takes only a few minutes to complete so sign up today!
If you have any problems with the registration
process or your account login, please contact support
This is a great article on AD design. I'd put it in the Articles forum but there's a chance a number of you might miss it if you don't visit the articles regularly and it's too good to pass up. Enjoy.
Quote:
“
Working in customer support for HP Services, one of the world's biggest computer support companies, I've seen some pretty messed-up Active Directory (AD) designs in my time. In many cases, the design disaster was the work of the nefarious "consultant" who was conveniently unreachable once the network was broke.
But even if the AD architect was available, a perception problem exists that can hamper efforts to repair the damage: Some believe that once the AD design is complete and implemented, it's set in stone. That's false: Although it can take significant time, effort and money, implementing a new design is usually possible—and sometimes required, if the root cause of the problem is the design itself.
I can't believe someone was so stupid that they actually thought they could get away with selling something like that. That AD design wasn't designed to support users, it was designed to sell hardware.... DC's for every 4 users, and 1000 child domains.... Anyone with any sense at all could see it would never work. It's a classic violation of KISS.