hi everyone,

we have a customer which is using a domain named centraldomain.com which has two way trust to all other forests (Infrastructure is in Hub and spoke mode) and 11 user forests.

first is this possible to use the centraldomain.com forest as a resource forest and at the same time as a user forest?

second what is difference between resource forest and central forest actually?

please advice me a deployment guide to both method also.

thanks guys

Hi

yes this can be done and supported. Please see this article showing supported topologies

Thanks Mark,

so from your description actually i have to run a central forest that contains Apps and Users together, right ?

Hi

you can run either. the topology you have already, you can install Lync in the central forest and then in child domains if you wish. Basically it fits into almost any topology. However, when thinking about Skype for Business (new Lync) resource forest is not supported for hybrid deployments, so keep that in mind. If you wanted a resource forest you would also have to use FIM.

domains that contain apps and users is preferred with regards to hybrid etc.

thanks

wait wait...

let's sync our ideas. u are telling me i can use Central forest for our customer at this momen,are you?

I'm thinking of doing that using FIM 2010R2 and deploy a central forest for Phase one of project, and make two way trusts and sync target Lync Users OU from every forest and later i can deploy new sites in topology builder under Central domain membership and service other forest Users in case of wan failure,right ?

another side of your note is about S4B which you mentioned resource forest is not supported,right ? so then since i am running central forest there is not limitations right ? so when i start my Lync to S4B migration later i don't encounter any limitations,right?

Hi

That's correct, using Lync you can deploy a central / resource forest topology and synchronise users using FIM. Those accounts will be disabled in the central / resource forest (essentially the same thing) but use SID history to reference the real account in the user forest / domain.

Yes, you can build a resilient topology under the same forest - not another forest.

About SFB in a resource / central forest - yes it is supported - BUT Hybrid setup with SFB and O365 is not supported. So if your requirement is not going to include hybrid then you can upgrade.

hope this helps

thanks