Re: Active Domain Architecture in an Academic Environment

["Dr. Wole Akpose" <wole.akpose () MORGAN EDU>]

A Single Forest is often sufficient and in many cases, a Single Forest,
Single Domain may be adequate - Ous may be a great way to support all the
delegation requirements as many of our experiences at Morgan has shown.

 

Our Architecture supports a Single Forest, Multiple Domain and Multiple OUs.
Departments, and other units choose if they want domain, OU or a hybrid of
both - based on their specific needs.

 

Wole Akpose

 

From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Timothy Payne
Sent: Tuesday, September 28, 2010 4:00 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Active Domain Architecture in an Academic
Environment

 

We are going with a single forest, single domain model for our current
Novell to MS migration.  

Tim Payne, CISSP, CISM, CCNA, CRISC
Network Administrator
Macalester College



On Tue, Sep 28, 2010 at 2:45 PM, Williams, Charles <CWilliams () ben edu>
wrote:

If you use multiple forests and want to use Active Directory to authenticate
for your applications, you will need to look at them very carefully.  Some
applications will only query a single authoritative source for
authentication.  Each forest is a single point of authority for these
applications.  Thus it will take work or means to combine the forests for
these applications to use AD for authentication.

--Randy

Charles R. Williams
Senior Director of Information Technology
Benedictine University
5700 College Road
Lisle, IL  60532
 
630-829-6025


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Feehan, Patrick
Sent: Tuesday, September 28, 2010 2:42 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: [SECURITY] Active Domain Architecture in an Academic Environment

In preparation for a migration from Novell, we are in the process of
designing a new Active Directory domain structure.  Right now we have
separate administrative (faculty and staff) and academic (classrooms and
students) networks.  We are debating whether to have a single forest
encompassing both networks (users and workstations) or a two-forest
architecture with the functions split.  We would like to hear what other
colleges have done.  Did you elect to implement one or two forests?  Why did
you choose that solution?  In retrospect, was that the correct solution?  If
not, why not?  Any information would be a great help.  Thanks.

Patrick J. Feehan JD, CIPP
Director of IT Privacy & Cybersecurity Compliance
Montgomery College
(240) 567-3087
patrick.feehan () montgomerycollege edu