Think 120,000 users and really slow links before you need to even think about segregating replication.
Here is a deck on this topic I delivered a few weeks ago - http://cid-789d5ea8239c9672.skydrive.live.com/self.aspx/[ADUG]%20Slides%20and%20Stuff/Active%20Directory%20Design%20Workshop%20-%20Update.pptx<http://cid-789d5ea8239c9672.skydrive.live.com/self.aspx/%5bADUG%5d%20Slides%20and%20Stuff/Active%20Directory%20Design%20Workshop%20-%20Update.pptx>. Thanks, Brian Desmond [email protected] c - 312.731.3132 From: Pauls Hotmail [mailto:[email protected]] Sent: Tuesday, November 10, 2009 5:31 AM To: NT System Admin Issues Subject: Active Directory design in the win2008 R2 world What's the collective wisdom these days regarding the justification of deploying multiple domains as a means of limiting replication traffic? I have an instance here where every part of me wants to suggest a single forest/domain as the optimum solution, but a couple of other admins are pushing for multiple domains purely with the justification of controlling AD object replication. The AD will be a completely new implementation based on Win 2008 R2, there are about 8 countries in scope, but all have extremely good/fast MPLS WAN links between them. There are currently only about 1200 users in total, and Exchange 2010 will be going in as well. I'm proposing a single domain, with multiple AD sites, as there's no other good reason for over-complicating the design with additional domains, i.e. none of the traditional justifications for adding additional domains apply in this case.. Plus I believe at least some of the traditional justifications no longer apply in W2008 anyway do they? - things like needing domains for the purpose of applying differing password policies for example, now that we have the new granular password policy ... Can anyone point me in the direction of some best practice design guidelines that would cast some light on these questions? - it's been a few years since I was last "properly" involved in AD design, so I'm conscious that things have moved on in the AD world, and I probably need to take up-to-date information into consideration.. Many thanks. Paul Gordon ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
