Associate
I've never encountered this before, but I'm hoping someone may have. All new forests I have ever created even for resource purposes etc have always had their own dns namespace i.e.
Forest 1 = domainname1.com
Forest 2 = domainname2.com
Which makes things nice and simple, now I have a need to stand up a new resource domain, but try and keep an extended namespace via a subdomain i.e.
Forest 1 / root domain = domainname1.com
Forest 1 / child domain = something.domainname1.com
Forest 2 / root domain = somethingelse.domainame1.com
Forest 2 / child domain = thisdomain.somethingelse.domainname1.com
So my thoughts are delegate that zone down to the new servers for the new forest. In theory because they're distinct namespaces with no overlap at that point things should work as from a trust point of view everything DNS wise could be resolved. It would then need an exclusion on the original forest side to exclude somethingelse.domainame1.com from that side as implicit for authentication
What are peoples thoughts on this? I'd prefer to have a completely new DNS domain for the new forest and can't see much in the way of google for this one
Thanks in advance
Forest 1 = domainname1.com
Forest 2 = domainname2.com
Which makes things nice and simple, now I have a need to stand up a new resource domain, but try and keep an extended namespace via a subdomain i.e.
Forest 1 / root domain = domainname1.com
Forest 1 / child domain = something.domainname1.com
Forest 2 / root domain = somethingelse.domainame1.com
Forest 2 / child domain = thisdomain.somethingelse.domainname1.com
So my thoughts are delegate that zone down to the new servers for the new forest. In theory because they're distinct namespaces with no overlap at that point things should work as from a trust point of view everything DNS wise could be resolved. It would then need an exclusion on the original forest side to exclude somethingelse.domainame1.com from that side as implicit for authentication
What are peoples thoughts on this? I'd prefer to have a completely new DNS domain for the new forest and can't see much in the way of google for this one
Thanks in advance
Last edited: