Are less domains better than more domains in active directory?
- by johnny
A colleague of mine wants to add a domain to our forest. He said it would be good for security. I believe him but I have no idea why it is any better than with just one domain. I read this on Wikipedia but it has no source:
"Microsoft recommends as few domains as possible in Active Directory and a reliance on OUs to produce structure and improve the implementation of policies and administration."
I have no idea if it's right or not. I was hoping for comments.
Thank you.