Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Applies To: Windows Server 2008, Windows Server 2008 R2
To create the Active Directory Domain Services (AD DS) forest root ___domain, complete the tasks in Checklist: Creating the Forest Root Domain.
About AD DS forest root ___domain
The first ___domain that you create in your AD DS forest is automatically designated as the forest root ___domain. The forest root ___domain provides the foundation for your AD DS infrastructure. You must create the forest root ___domain before you create regional domains. In addition, services that run on forest root ___domain controllers, such as the Kerberos version 5 authentication protocol, must be highly available to ensure that users maintain access to resources throughout the forest. The forest owner is responsible for deploying the forest root ___domain.
If your AD DS forest design requires only one ___domain, then the forest root ___domain will also contain all your users, groups, and resources. During deployment, you can create an organizational unit (OU) structure after the forest root ___domain deployment is complete.
In a multiple AD DS ___domain design, the forest root ___domain can be a dedicated root used only for administration of the forest or it can contain users, groups, and resources in addition to the forest administration accounts. After you deploy the forest root ___domain, the forest owner will create one or more regional domains to complete the AD DS forest hierarchy.
For more information about deploying additional regional domains, see Deploying Windows Server 2008 Regional Domains.