Remember, my experience is mostly Fortune 50 and better. Most of the last ten years was Fortune 5 or greater. Today I spent 10.5 hours at a (I think) Fortune 2 company - another widget maker. Not AD work though thank god, it was to consult on some Windows OS level stuff and some issues encountered getting some probe based monitoring working with an app running on it. Last time I talked to someone about it, their AD environment was best classified as a military term that you can't say in mixed company.
These environments are to the size that say a single DNS domain for North America is 100,000+ hosts, do you really want 100,000+ hosts in a DNS Zone? If so great! How are you delegating that management? If you have a solution, great! In those environments though it is almost certain DNS is being managed in some decentralized fashion and very likely is Bind based or at least running on UNIX and has been for a long long time. Heck a single DataCenter itself may be divied up into 3-4-5 DNS Zones for management by different groups. The times I have seen Windows DNS in these environments is with small pocket deployments, not big centralized configurations. Generally it is ShadowIT running around and central IT is trying to stamp them out anyway. Oh, you may have the underscore zones delegated off to Windows, that is done as well. I like being able to look at a hostname and knowing where in the world the machine is. Would I do this in some small company of 5000-10000 hosts in one building? No, highly doubtful. But the more decentralized the environment in terms of machine locations and host management, the more I would be looking in that direction. Overall, I care about DNS resolving correctly but I don't have some innate need for it to run on Windows. In fact, in these large environments I kind of like letting someone else manage it. Integrated DNS has always bothered me, the implicit circular logic there. joe -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Phil Renouf Sent: Tuesday, March 29, 2005 12:29 PM To: [email protected] Subject: Re: [ActiveDir] Compelling arguments? Agreed. I'd love to get more info on your view on that though; get some more details of how you would set it up in that type of environment given the chance ;) The issue of geographic DNS isn't something I'd thought of unless it was also attached to a multi domain geographic type forest (NA, Asia, Europe etc.) Phil On Tue, 29 Mar 2005 12:20:06 -0500, Brent Westmoreland <[EMAIL PROTECTED]> wrote: > As always, thanks for the thorough reply, mate... > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
