Under what conditions should Administrators create multiple forests?

Microsoft recommends the creation of multiple forests under the following conditions:

• If Administrators do not trust each other: An Administrator can create a “denial of service” condition. One can create this condition by rapidly creating or deleting objects, hence causing a large amount of replication to the global catalog. This replication can waste network bandwidth and slow down global catalog servers, as they spend time in processing replication. This condition forces administrators to create multiple forests.
• Organizations cannot agree on a forest change policy: Changes in schema, configuration, and the addition of new domains to a forest have forest-wide impact. If organizations in a forest cannot agree on a common policy, they cannot share the same forest, forcing administrators to create multiple forests.
• If one wants to limit the scope of a trust relationship: All domains in a forest trust each other. In order to prevent certain users from being granted permissions to certain resources, those users must be placed in a forest different from the forest containing those resources. Administrators can use explicit trust relationships to allow those users to be granted access to resources in specific domains, if required.

• Click here to get free mcp MCP exam practice questions.
• Best exam simulation Microsoft mcsa-2000-to-2003 download free trial.
• Download practice question and study guide for mcsa-to-mcse-2003 for exam.
• Pass Microsoft mcse-2003 - MCSE
• Pass Microsoft mcse-2000 - MCSE 2000
• Download practice question and study guide for mcse-2000-security for exam.
• Download free practice test for Microsoft MCSE 2003 Messaging exam.
• Best exam simulation Microsoft mcse-2003-security download free trial.
• Click here to download mcse-nt-to-2003 test study guide and practice question.
• Download free practice test for Microsoft Windows 2003 Planning Active Direct. exam.
• Click here to get free 70-297 Windows 2003 Design Active Directory exam practice questions.
• Click here to get free 70-640 MCTS: Windows Server 2008 Active Directory exam practice questions.
• Download free practice test for 70-647 MCITP: Windows Server 2008, Enterprise Admin exam.

• Previous Entry: What is a domain?
• Next Entry: What is a constructor?