Hi, For the vendor proposing the configuration, you make more money ;-) If you're a big enough site I guess 2 more servers isn't such a big deal, and there's always vmware. It does mean that if you screw up bigtime you still have a way to recover. However Microsoft also have additional tools for win2k3 that allow you to reset the default domain policy to defaults etc so the risks of not being able to "fix" your AD have reduced significantly. Would I still do it? Depends. It's insurance, but it'll cost you 2 server licenses and 2 servers. Regards, Rick Ulrich Mack rmack@xxxxxxxxxxxxxx Volante Systems 18 Heussler Terrace, Milton 4064 Queensland Australia tel +61 7 32467704 -----Original Message----- From: Adam.Baum@xxxxxxxxxxxxxx [mailto:Adam.Baum@xxxxxxxxxxxxxx] Sent: Wednesday, 16 July 2003 3:22 AM To: thin@xxxxxxxxxxxxx Subject: [THIN] OT: AD design question Hi all, Quick question on AD Design. Given the Windows 2003 improves AD, is it still considered good practice to use and empty root domain? If so, why? What are some of the drawbacks to empty root? I am in the process of coming up with a few design ideas for an AD project and need to know pros/cons. I'm having trouble with the empty root concept. While I understand it and its functionality (to a point), I am not sure if it is needed when using Win2003. adam ******************************************************** This weeks sponsor - IDP ServerBoss Restrict, Manage and Control Access to your applications and other valuable Citrix, Windows NT, 2000 and 2003 Server Resources http://www.serverboss.com/default.asp?partner=thethin ********************************************************** Useful Thin Client Computing Links are available at: http://thethin.net/links.cfm For Archives, to Unsubscribe, Subscribe or set Digest or Vacation mode use the below link: http://thethin.net/citrixlist.cfm -------------------------------------------------------------------------------------------------------------------- The information contained in this e-mail is confidential and may be subject to legal professional privilege. It is intended solely for the addressee. If you receive this e-mail by mistake please promptly inform us by reply e-mail and then delete the e-mail and destroy any printed copy. You must not disclose or use in any way the information in the e-mail. There is no warranty that this email or any attachment or message is error or virus free. It may be a private communication, and if so, does not represent the views of Volante group Limited.