Are less domains better than more domains in active directory?

Posted by johnny on Server Fault See other posts from Server Fault or by johnny
Published on 2010-04-06T15:38:52Z Indexed on 2010/04/06 15:43 UTC
Read the original article Hit count: 274

A colleague of mine wants to add a domain to our forest. He said it would be good for security. I believe him but I have no idea why it is any better than with just one domain. I read this on Wikipedia but it has no source:

"Microsoft recommends as few domains as possible in Active Directory and a reliance on OUs to produce structure and improve the implementation of policies and administration."

I have no idea if it's right or not. I was hoping for comments.

Thank you.

© Server Fault or respective owner

Related posts about active-directory

Related posts about windows-domain