The first one is to use an inactive sub domain of a domain that you use publicly.
Tree root domain controller.
The whole group of parents and child relationship forms the tree.
A child domain might in turn have its own child domain.
Domain tree is collections of domains that are grouped together in hierarchical structures.
They can only exist.
You wouldnt be albe to just.
A child to one domain can also be the parent to other domains.
The fact that ad local is the parent in the forest provides no additional benefit when it comes to authentication.
Active directory is a set of one or more trees.
Using the domain rename utility rendom exe you can change the netbios and dns names of a domain including any child parent domain tree or forest root domains from which all others branch off in the hierarchy.
When you add a domain to a tree it becomes a child of the tree root domain.
Shortcut trusts are manually created one way transitive trusts.
Each domain is responsible for authenticating users in their domains.
Also on then do a domain name change on the root domain to the desired root domain name that doesnt work that way either.
The root domain the first domain that you create contains the configuration and schema for the forest.
Selecting the forest root domain involves determining if one of the active directory domains in your domain design can function as the forest root domain or if you need to deploy a dedicated forest root domain.
Domains in a tree are also linked together by trust relationships.
So think of a group of domains that share the same root domain address as a tree.
Domains can also be renamed.
A domain tree is made up of several domains that share a common schema and configuration forming a contiguous namespace.
Additional domains are added to the root domain to form the tree structure or the forest structure depending on the domain name requirements.
A tree root trust can only be established between the roots of two trees in the same forest and are always transitive.
2 minutes to read.
The child domains inherit the address space of the parent so the child is a subdomain.
Only one domain name needs to be registered even if you later decide to make part of your internal name publicly accessible.
By renaming domains in this manner you can thereby move them in the hierarchy.
For information about deploying a forest root domain see deploying a windows server 2008 forest root domain.
Advantages to this most preferred approach includes.
You cannot manually create a tree root trust.
