AD DS 部署需求AD DS Deployment Requirements

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

您現有的環境的結構判斷策略部署 Windows Server 2008 Active Directory Domain Services (AD DS)。The structure of your existing environment determines your strategy for deploying Windows Server 2008 Active Directory Domain Services (AD DS). 如果您要建立 AD DS 環境,您不需要現有的網域結構完成 AD DS 設計,才能開始建立您的環境 AD DS。If you are creating an AD DS environment and you do not have an existing domain structure, complete your AD DS design before you begin creating your AD DS environment. 您可以部署新的樹系根網域然後部署中的其餘部分網域結構依據您的設計。Then, you can deploy a new forest root domain and deploy the rest of your domain structure according to your design.

此外,部分 AD DS 部署,您可以選擇升級並重建您的環境。Also, as part of your AD DS deployment, you might decide to upgrade and restructure your environment. 例如如果您的組織已經現有的 Windows 2000 網域結構,您可能會執行某些網域的就地升級並重建其他人。For example, if your organization has an existing Windows 2000 domain structure, you might perform an in-place upgrade of some domains and restructure others. 此外,您可以選擇由重建樹系之間網域或重建森林中的網域部署 AD DS 之後減少複雜的環境。In addition, you might decide to reduce the complexity of your environment by either restructuring domains between forests or restructuring domains within a forest after you deploy AD DS.

部署 Windows Server 2008 森林根網域Deploying a Windows Server 2008 forest root domain

森林根網域 AD DS 森林基礎結構提供基本知識。The forest root domain provides the foundation for your AD DS forest infrastructure. 若要部署 AD DS,您必須先部署森林根網域。To deploy AD DS, you must first deploy a forest root domain. 若要這樣做,您必須檢視 AD DS 設計。設定樹系根網域; DNS 的服務建立部署森林根網域控制站、設定網站拓撲森林根網域,以及設定(也稱為彈性的單一主機操作或 FSMO); 操作主機角色所組成森林根網域並引發的樹系和網域正常運作的層級。To do this, you must review your AD DS design; configure the DNS service for the forest root domain; create the forest root domain, which consists of deploying forest root domain controllers, configuring the site topology for the forest root domain, and configuring operations master roles (also known as flexible single master operations or FSMO); and raise the forest and domain functional levels. 下圖顯示部署森林根網域整體程的序。The following illustration shows the overall process of deploying a forest root domain.

AD DS 需求

如需詳細資訊,請查看部署 Windows Server 2008 森林根網域For more information, see Deploying a Windows Server 2008 Forest Root Domain.

部署 Windows Server 2008 區域的網域Deploying Windows Server 2008 regional domains

森林根網域部署完成之後,您就可以將任何新的 Windows Server 2008 區域網域所指定的設計。After you complete the deployment of the forest root domain, you are ready to deploy any new Windows Server 2008 regional domains that are specified by your design. 若要這樣做,您必須部署網域控制站的每個地區的網域。To do this, you must deploy domain controllers for each regional domain. 下圖顯示部署區域網域程的序。The following illustration shows the process of deploying regional domains.

AD DS 需求

如需詳細資訊,請查看部署 Windows Server 2008 地區網域For more information, see Deploying Windows Server 2008 Regional Domains.

升級到 Windows Server 2008 的 Active Directory 網域Upgrading Active Directory domains to Windows Server 2008

您的 Windows 2000 或 Windows Server 2003 網域升級到 Windows Server 2008 網域是要利用其他 Windows Server 2008 功能有效、簡單的方式。Upgrading your Windows 2000 or Windows Server 2003 domains to Windows Server 2008 domains is an efficient, straightforward way to take advantage of additional Windows Server 2008 features and functionality. 您可以升級以維護您目前的網路及網域設定時改善安全性、延展性及管理您的網路基礎結構的網域。You can upgrade domains to maintain your current network and domain configuration while improving the security, scalability, and manageability of your network infrastructure. 從 Windows 2000 或 Windows Server 2003 升級到 Windows Server 2008 需要最小的網路設定。Upgrading from Windows 2000 or Windows Server 2003 to Windows Server 2008 requires minimal network configuration. 升級使用者作業上也有太大的影響。Upgrading also has little impact on user operations. 如需詳細資訊,請查看Windows Server 2008 和 Windows Server 2008 R2 AD DS 網域升級 Active Directory 網域For more information, see Upgrading Active Directory Domains to Windows Server 2008 and Windows Server 2008 R2 AD DS Domains.

重新建構 AD DS 網域Restructuring AD DS domains

當您重建網域之間 Windows Server 2008 森林(樹系間重建)時,您可以在您的環境中減少的網域並減少管理複雜和負擔。When you restructure domains between Windows Server 2008 forests (interforest restructure), you can reduce the number of domains in your environment and therefore reduce administrative complexity and overhead. 當您移轉重組程序的一部分樹系之間物件時,這兩個來源網域與目標網域環境同時存在。When you migrate objects between forests as part of this restructuring process, both the source domain and target domain environments exist simultaneously. 這可讓您可以回復到原始檔環境移轉必要。This makes it possible for you to roll back to the source environment during the migration, if necessary.

當您重建 Windows Server 2008 的網域中的 Windows Server 2008 森林(樹系內重建)時,您可以整合網域結構,減少管理複雜和管理成本。When you restructure Windows Server 2008 domains within a Windows Server 2008 forest (intraforest restructure), you can consolidate your domain structure and therefore reduce administrative complexity and overhead. 您重建森林中的網域,當移轉的帳號不會存在來源網域中。When you restructure domains within a forest, the migrated accounts no longer exist in the source domain.

如需有關如何使用 Active Directory 移轉工具 (ADMT) 3.1 (ADMT v3.1) 版重建網域的詳細資訊,請查看ADMT v3.1 移轉指南For more information about how to use the Active Directory Migration Tool (ADMT) version 3.1 (ADMT v3.1) to restructure domains, see ADMT v3.1 Migration Guide.