Special Edition Using Microsoft Active Directory

Forests

A forest is a collection of trees that do not share the same contiguous namespace. Figure 11.4 shows just such an entity. Because fis.local was the first domain in the forest, it retains the title of forest root. The fullertoninfo.com domain is a member of the fis.local forest but is the root of its own tree.

Figure 11.4. Building a forest with multiple trees.

Caution

Although fis.local and fullertoninfo.com appear to be at the same level in the forest because they are both roots of their own trees, a forest has only one forest root domain, and that is the first domain created in the forest. By default, this is the home of two groups that ...