Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Hey! I need my users to be in different security groups and the ability to delegate control. What forest model can I/should I use? And why?

share|improve this question

migrated from Dec 18 '09 at 21:44

This question came from our site for professional and enthusiast programmers.

There isn't much detail in the question that would require any special Active Directory Architecture. If all you want is groups and delegation you can simply drop a domain controller in and be alright.

That is a single forest topology with a single domain. It is simple, effective, and takes little to no expertise initially.

Typically if you are asking the question which should I use, you are at a point where you should start out with a simple topology until you have the requisite understanding and experience.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.