Re: [ActiveDir] Empty root domain benefits?

[David Devlin]

I'm not sure about others, but at our location 3rd party vendors often will request rights "beyond what they require"  to install their applications within our domain.  The most they usually may need is a local admin account on the member server(s), - but many times we've been asked by vendors for use of the domain admin account.  I've also seen the vendors install scripts fail because the process was expecting domain admin rights (this script was trying to create accounts in the domain admin group).

 

This was one of the reasons why we decided to go with an empty root and a number of child domains (one domain is a domain for testing).  Basically the empty root gives us a bit more protection....

 

Dave

>>> [EMAIL PROTECTED] 02/18/03 09:00PM >>>
Hello Everyone,

    The simplest domain model is the Single Forest / Single Domain. I
was thinking of using this model with an "empty" root domain? Does anyone
have any experience with "empty" root domain? Is it really beneficial? We
are only a small company with a few hundred users and have 4 domains in a
multimaster NT domain model.

What are the pros and cons?

Thanks,

Cliff Airhart
Answer Financial Inc.
Senior Systems Administrator - Server Support / eBusiness
[EMAIL PROTECTED]
818.644.4225
We answer to you.
List info   : http://www.activedir.org/mail_list.htm
List FAQ    : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/