Design a single-domain Active Directory forest

  • Module
  • 9 Units
Advanced
Administrator
Identity and Access Administrator
Windows Server

Design a resilient single-domain AD DS forest with an intentional namespace, DNS architecture, site topology, replication model, and domain controller placement.

Learning objectives

In this module, you'll:

  • Justify a single-domain forest and select durable DNS and UPN namespaces.
  • Design AD-integrated DNS, sites, subnets, and site links.
  • Plan replication convergence and failure behavior.
  • Place domain controllers, DNS servers, global catalogs, FSMO roles, and the authoritative time source.
  • Validate the design with objective evidence and failure scenarios.

Prerequisites

  • Advanced experience administering Active Directory Domain Services.
  • Working knowledge of DNS, IP routing, Group Policy, Kerberos, and Windows PowerShell.
  • Familiarity with domain controller promotion and AD DS replication concepts.
Start