====== Global Multi-Domain Design ======
When a company spans more than one continent, I design the active directory forest based on a geographical model:
Root (Used for adminstration accounts and "universal" groups; but otherwise empty)
|
+--- americas (includes North America and South America)
|
+--- emea (includes Europe, Middle East, and Africa)
|
+--- apac (includes Asia, Australia, and any countries in the Pacific Ocean)
If the number of objects (users, groups, OUs) in one domain exceed 250,000, I typically would break the geographic domain down to country domains such as:
americas (This becomes an "empty" domain and is used to control replication to/from the "forest")
|
+---us
|
+---canada
|
+---brazil
Each of these domains would then follow my design for single-domain designs.