There is a point to this story, but it has temporarily escaped my mind...
Contact Me MyFaceBook MyLinkedIn MyGitHub MyTwitter

Global Multi-Domain Design

When a company spans more than one continent, I design the active directory forest based on a geographical model:

Root (Used for adminstration accounts and "universal" groups; but otherwise empty)
 |
 +--- americas (includes North America and South America)
 |
 +--- emea (includes Europe, Middle East, and Africa)
 |
 +--- apac (includes Asia, Australia, and any countries in the Pacific Ocean)

If the number of objects (users, groups, OUs) in one domain exceed 250,000, I typically would break the geographic domain down to country domains such as:

americas (This becomes an "empty" domain and is used to control replication to/from the "forest")
 | 
 +---us
 |
 +---canada
 |
 +---brazil

Each of these domains would then follow my design for single-domain designs.

Copyright © 2022 by Julian Easterling. SOME RIGHTS RESERVED.
Privacy Policy              Terms of Use             


Creative Commons License
Except where otherwise noted, content on this site is
licensed under a Creative Common Attribution-Share Alike 4.0 International License.


All of the opinions expressed on this website are those of Julian Easterling and
do not represent the views of any of my current and previous clients or employers in any way.

If you notice an error on the site or content that has not been properly attributed, bring
it to my attention using the contact page and I will endeavor to fix it as soon as I can.

I accept no responsibility or liability for any damages incurred by following any of
my advice or by using any of the information on my site or of those sites that I link to.