Register now or log in to join your professional community.
Logical Diagram of Active Directory? What is the difference between child domain & additional domain server?
A child domain controller is a sub domain like
www.microsoft.com and www.tech.microsoft.com, tech.microsoft.com is a sub domain in microsoft.com.
ADC is a replica of a domain controller for better performance and high availaibility, which can be act as a domain controller in certain circumstances.
A child domain controller creates a subdomain in your active directory tree. This is used as a security feature so a group of users can have separate policies and limited or controlled access to the parent domain resources.
An additional domain controller adds a secondary domain controller to the domain. It’s recommended to have at least2 domain controllers per domain to take advantage of the high availability features of Active Directory.
Logical Diagram of Active Directory:
Active Directory (AD) is a directory service developed by Microsoft for Windows domain networks. It's a hierarchical database that stores information about network resources and makes this information available to authorized users and computers. Here's a simplified logical diagram of Active Directory:
Forest: The highest level of the Active Directory hierarchy is the forest. A forest is a collection of one or more domain trees that share a common schema, configuration, and global catalog. The forest is represented as the top-level container in the Active Directory structure.
Domain Tree: A domain tree is a hierarchical structure of one or more domains. Domains in a tree share a contiguous DNS namespace, and they trust each other by default. Domains within a tree have transitive trusts.
Domain: A domain is a security boundary within the forest. It is a logical container that holds objects like users, groups, computers, and organizational units (OUs). Domains are also administrative boundaries, and each domain has its own security policies and accounts.
Organizational Units (OUs): OUs are containers within domains that are used to organize and manage objects. They allow for delegated administration and can have their own group policies.
Objects: Objects within Active Directory include users, groups, computers, printers, and other resources. They are organized within domains and OUs.
Trust Relationships: Trust relationships define how domains within a forest trust each other. There are two main types of trusts: transitive trusts within a tree and external trusts between trees or forests.
in architecture is expencive for autocad
child domain is created under another domain"parent domain" with continuous namespace and has default trust relationship with all other domains in the forest
example:
mcsa.zoom.com
mcsa is the child domain and zoom.com is the parent domain
Additional domain controller is a server that contains read and write copy of NTDS.DIT and used for redundancy and load balancing
The logical structure of Active Directory includes forest, domains, tree, OUs and global catalogs.
