Plan Your AD Bridge Deployment

The key to a successful deployment is planning. Before you begin deploying AD Bridge Enterprise in an enterprise environment, develop a plan that addresses at least the following aspects of installation and deployment:

  • Review the AD Bridge Enterprise Release Notes to ensure your environment meets the deployment requirements.
  • Set up a test environment. We recommend that you first deploy AD Bridge Enterprise in a test environment so that you can identify and resolve any issues specific to your mixed network before you put the system into production.
  • Determine whether to use AD Bridge Enterprise in Directory Integration, Schemaless mode, or ID Range. When you configure your domain with the AD Bridge Enterprise domain configuration wizard, you must choose the mode to use.

For more information on Directory Integration, Schemaless mode, and ID Range, please see Storage Modes in Active Directory.


Back up Active Directory before you run the AD Bridge Enterprise domain configuration wizard.

  • Decide whether to configure AD Bridge Enterprise to manage a single forest or multiple forests. If you manage multiple forests, the UID-GID range assigned to a forest should not overlap with the range of another forest.
  • Determine how you will migrate Linux or Unix users to Active Directory. For example, if you are using NIS, decide whether you will migrate those accounts to Active Directory and whether you will migrate local accounts and then delete them or leave them. It is usually recommended that you delete interactive local accounts other than the root account.
  • Identify the structure of the organizational units or cell topology that you will need, including the UID-GID ranges. If you have multiple NIS servers in place, your users may have different UID-GID maps in each NIS domain. You may want to eliminate the NIS servers but retain the NIS mapping information in Active Directory. To do so, you can use AD Bridge Cells.
  • Determine whether you will use aliasing. If you plan to use aliasing, you must associate users with a specific AD Bridge cell; you cannot use the default cell. ID Range may not be used with cells.