設計的邏輯結構Designing the Logical Structure

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

Active Directory Domain Services (AD DS) 可讓您組織建立使用者和資源管理延展性、安全且更容易管理基礎結構。Active Directory Domain Services (AD DS) enables organizations to create a scalable, secure, and manageable infrastructure for user and resource management. 它也會讓它們支援 directory 功能的應用程式。It also enables them to support directory-enabled applications.

個精心設計的 Active Directory 邏輯結構提供下列優點:A well-designed Active Directory logical structure provides the following benefits:

  • Microsoft windows 的網路包含大量物件簡化的管理Simplified management of Microsoft Windows-based networks that contain large numbers of objects

  • 整合的網域結構和管理降低的成本A consolidated domain structure and reduced administration costs

  • 委派系統資源,視控制The ability to delegate administrative control over resources, as appropriate

  • 減少的頻寬影響Reduced impact on network bandwidth

  • 簡化的資源分享Simplified resource sharing

  • 搜尋最佳效能Optimal search performance

  • 低取得成本Low total cost of ownership

個精心設計的 Active Directory 邏輯結構可協助有效整合的群組原則; 此類功能桌面鎖定。軟體 distribution;和使用者、群組、工作站和伺服器管理到您的系統。A well-designed Active Directory logical structure facilitates the efficient integration of such features as Group Policy; desktop lockdown; software distribution; and user, group, workstation, and server administration into your system. 此外,仔細設計邏輯結構有助於 integration 的 Microsoft 非 Microsoft 應用程式與服務,例如 Microsoft Exchange Server 公用基礎結構 (PKI),而且網域型散發檔案系統 (DFS)。In addition, a carefully designed logical structure facilitates the integration of Microsoft and non-Microsoft applications and services, such as Microsoft Exchange Server, public key infrastructure (PKI), and a domain-based distributed file system (DFS).

當您設計邏輯結構 Active Directory 部署 AD DS 之前時,您可以充分利用功能 Active Directory 部署程序最佳化。When you design an Active Directory logical structure before you deploy AD DS, you can optimize your deployment process to best take advantage of Active Directory features. 若要設計的 Active Directory 邏輯結構,您的設計團隊第一次辨識出您的組織的需求,根據這項資訊,決定造成樹系和網域限制的位置。To design the Active Directory logical structure, your design team first identifies the requirements for your organization and, based on this information, decides where to place the forest and domain boundaries. 然後、設計團隊決定如何設定的網域名稱系統」(DNS) 環境樹系的需求。Then, the design team decides how to configure the Domain Name System (DNS) environment to meet the needs of the forest. 最後,設計團隊辨識所需委派資源您在組織中管理結構單位(組織單位)。Finally, the design team identifies the organizational unit (OU) structure that is required to delegate the management of resources in your organization.

本指南In this guide