Updated: November 25, 2009
Applies To: Windows Server 2008 R2
An Active Directory forest contains all the domains, sites, and trusts that are part of Active Directory Domain Services (AD DS). The forest acts as a security boundary for an organization, and it defines the scope of authority for administration. By default, a forest contains a single domain, which is called the forest root domain.
The following is a list of the managed entities that are included in this managed entity:
A domain is a distinct unit of administration and resource grouping in Active Directory Domain Services (AD DS).