What Are Domains and Forests?
The Logical Structure of Active Directory
Active Directory stores network object information and implements the services that make this information available and usable to users.
presents this information through a standardized, logical structure that helps you establish and understand the organization of domains and domain resources in a useful way.
This presentation of object information is referred to as the logical structure because it is independent of the physical aspects of the Active Directory infrastructure,
such as the domain controllers required for each domain in the network.
Benefits of the Logical Structure
The logical structure provides a number of benefits for deploying, managing, and securing network services and resources. These benefits include:
- Increased network security. The logical structure can provide security measures such as autonomy for individual groups or complete isolation of specific resources.
- Simplified network management. The hierarchical nature of the logical structure simplifies configuration, control, and administration of the network, including managing user and group accounts and all network resources.
- Simplified resource sharing. The logical structure of domains and forests and the relationships established between them can simplify the sharing of resources across an organization.
- Low total cost of ownership. The reduced administration costs for network management and the reduced load on network resources that can be achieved with the Active Directory logical structure
can significantly lower the total cost of ownership.
An efficient Active Directory logical structure also facilitates the system integration of features such as Group Policy, enabling desktop lockdown, software distribution, and administration of users,
groups, workstations, and servers. In addition, the logical structure can facilitate the integration of services such as Exchange 2000, public key infrastructure (PKI), and domain-based distributed file system (DFS).