Designing the Active Directory Structure |
Each forest you create should have an associated Forest Change Control Policy as part of your Forest Plan document. You will use this policy to guide changes that have forest-wide impact. You do not need to determine the individual processes before continuing, but understanding their ownership is important. The policy should include information about each of the shared elements in a forest.
The schema administrators group has full control over the schema for a forest. The schema change policy should include:
For more information about Active Directory schema, see the Microsoft® Windows® 2000 Server Resource Kit Distributed Systems Guide.
The enterprise administrators group has full control over the Configuration container that is replicated throughout the forest. The configuration change policy should include: