Ask the Expert

Purpose of child domains and additional controllers

What are the advantages of having child domain and additional domain controllers?

    Requires Free Membership to View

Additional domains are typically needed for one of the following reasons:

  1. A group of users that needs to have more stringent Account Password policies
  2. A group of users/departments that needs to be separated for legal reasons – for example a branch of the company that is being spun-off as an independent business.
  3. There is a separation of the IT staff. I am partial to centralized staffing and operations, but some companies have departments or groups that must run independent of one another based on the specific technology needs. In some cases, the IT staff is separated by geographical regions, and more specifically, time zones.
  4. Security issues. HR is a typical example. However, the level of security of a set of servers can be achieved without an additional domain.
The addition of another domain should not be taken lightly. The extra expense and complexity are typically not warranted. Handling isolation of users, hardware or resource for administrative or security reasons can easily be handled via Organizational Structures, Group Policies and Access Control Lists (ACLs).

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in January 2005

There are Comments. Add yours.

 
TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: