Re: Domain naming strategies
- From: "Anthony" <anthony.spam@xxxxxxxxxxxxxx>
- Date: Tue, 11 Jul 2006 14:22:09 +0100
Thanks Ace, those are the discussions I was referring to.
What with extranets and SSL VPN's I am struggling to see a good reason not
to use the delegated sub domain of a public zone (scenario2 below), just
because it represents reality. The other two routes don't seem to offer any
significant security and make it a bit more complicated to manage.
It is odd that such a fundamental part of the AD design has little good
reason one way or the other!
Anthony
"Ace Fekay [MVP]" <PleaseAskMe@xxxxxxxxxxxxxx> wrote in message
news:OBW1%23avoGHA.3964@xxxxxxxxxxxxxxxxxxxxxxx
In news:e6r%23kjfoGHA.1600@xxxxxxxxxxxxxxxxxxxx,
Anthony <anthony.spam@xxxxxxxxxxxxxx> stated, which I commented on below:
This question went astray the first time. Its a well worn question,
but I'd like to see if there are any new thoughts on this. I am
looking at the naming strategy for a new forest. I am aware of the
discussions about the alternative strategies: non-valid; non-public
and public domains. I can't see a really good reason not to use the
public domain name as the starting off point for AD domain naming.
The usual reason for using a private namespace like ad.myco.local is
that it won't can't see a
good reason not just to use the one namespace. Then your security
comes down to layers of access control between public and private
information, rather than a global internal/external split.
Does anyone have anything new to add?
Anthony
Interesting question that has been around forever and re-hashed since the
beta days of Windows 2000. Read thru this old discussion. I'm sure it
covers just about everything you'll
Assigning the Forest Root Domain Name:
===========================================
I hope that helps
.
- Follow-Ups:
- Re: Domain naming strategies
- From: Ace Fekay [MVP]
- References:
- Domain naming strategies
- From: Anthony
- Re: Domain naming strategies
- From: Ace Fekay [MVP]
- Prev by Date: Re: ADAM cal license?
- Next by Date: Re: Trouble with LoginScripts
- Previous by thread: Re: Domain naming strategies
- Next by thread: Re: Domain naming strategies
- Index(es):