This design, while administratively more complex, provides the best security. It also raises support costs and makes collaboration a little more difficult, but it definitely has its benefits. This design will have standalone forests for all of the business units or departments. This also means that by default they cannot see or access each other. Administrators then create trust relationships between the different domains that are within the forests. This will give the granularity needed. To visually understand this, please see the following image:
Active Directory Disaster Recovery
By :
Active Directory Disaster Recovery
By:
Overview of this book
Table of Contents (17 chapters)
Active Directory Disaster Recovery
Credits
About the Author
About the Reviewers
Preface
Free Chapter
An Overview of Active Directory Disaster Recovery
Active Directory Design Principles
Design and Implement a Disaster Recovery Plan for Your Organization
Strengthening AD to Increase Resilience
Active Directory Failure On a Single Domain Controller
Recovery of a Single Failed Domain Controller
Recovery of Lost or Deleted Users and Objects
Complete Active Directory Failure
Site AD Infrastructure Failure (Hardware)
Common Recovery Tools Explained
Sample Business Continuity Plan
Customer Reviews