Posts

Showing posts from March, 2012

Same Group Policy Can't Be Applied Across Multi-Forest

Group Policy Group Policy provides administrative control over users and computers. Group Policy can be applied to a domain, organizational unit, or site within the same forest. It is not possible to apply the same Group Policy object to users and computers in multiple forests. If necessary, administrators of the forests can apply identical Group Policy objects to the domains, organizational units, or sites in different forests. For example, if you are managing merged organizations and have applied identical Group Policy objects to affect the users and computers in each domain in the original forest, you might want to apply identical Group Policy objects to all users and computers in each domain in the other (merged) forest. Another scenario in which Group Policy management across forests is important is in the test-to-production scenario. For example, for staging purposes, many customers maintain a separate test forest that closely resembles the production forest. After the p...

Add a Child Domain with DNS delegation (W2k3 vs W2k8)

http://mikehowells.wordpress.com/2011/04/05/adding-a-child-domain-using-windows-server-2003-vs-windows-server-2008-r2/ Also as a reference, adding a child domain via GUI http://technet.microsoft.com/en-us/library/cc771856(v=ws.10).aspx The domain-wide dns zone copy is in DomainDnsZones folder in DNS management snap-in The forest-wide dns zone copy is in ForestDnsZones folder in DNS management snap-in More details about DomainDnsZones and ForestDnsZones are in http://blog.donews.com/skygored/archive/2008/11/29/1391076.aspx The following is a good reference about the parent-child dns desgin options https://msmvps.com/blogs/acefekay/archive/2010/10/01/dns-parent-child-dns-delegation-how-to-create-a-dns-delegation.aspx