Service administrator accounts will reside on the New York root domain while user accounts for each region will reside on the appropriate domain . For administration purposes , the branch offices will functions as child domains under the New York root domain . This configuration was chosen because it is much easier to manage than a configuration with a separate domain for administrative accounts . Active Directory Naming Convention : WWTC . org is the Active Directory namespace used by WWTC . It is a registered fully qualified domain name for WWTC . WWTC will use the same internal and external namespace . WWTC . org will be used from inside and outside the organization without a separate namespace for internal access to resources . This means that the tree name ( WWTC . org ) is consistent for the private and public ( Internet ) allowing users to logon with the same credentials internally and externally . This requires a separate zone outside the firewall to provide name resolution for public resources and does create security concerns to ensure that clients accessing resources from outside the organization do not have access to internal company resources . This also creates the requirement for maintaining the records on both the internal and external DNS servers simultaneously . The attached illustration shows this configuration . Application Services : Windows Server 2012 is installed on the network and the following Active Directory features will be implemented . Windows Deployment Services ( WDS ) will be implemented to allows