We are looking at creating a new ad design to house 4 currently separate ad forests. Some are saying 1 ad single forest is better but as there's will be multiple admins across the world I feel a new forest multiple child domain approach would be better.
One question I am looking at is the role of the enterprise admin. Are there any specific roles apart from assigning site level gpos and authorising dhcp servers? Could you easily and in a controlled manageable way use the delegation ou feature to adequately
assign all the relevant individual admin permissions to fully allow site admins to maintain full control of their relative sites or would a child domain be better?
↧