That is about it. It typically makes much more sense to create another Organizational Unit (OU) as opposed to another domain. Creating another domain will result in needing many new servers throughout the enterprise if you expect to operate smoothly. In addition, the extra domains result in much more additional administrative work. The OUs are flexible and can be used to delegate authority if that is what these different divisions want. Different group policies can be applied to the different OUs. Objects can be moved in and out of OUs. It is simply a much better way to go.
Dig Deeper on Microsoft Active Directory
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.