该项目I'm工作需要，要权威性，它的用户对广告，并作为对自己的用户群后备检查。现在我需要在生产环境之外对它进行测试。

The project I´m working on needs to auth its users against AD, and as a fallback check against its own user base. Now I need to test it outside the production environment.

什么是设置的最佳方法的Active Directory的测试环境？目前I'm下载Windows 2003的虚拟PC image,并规划了VMWare虚拟局域网。

What is the best method to setup a Active Directory test environment? Currently I´m downloading a Windows 2003 Virtual PC image, and planning a VMWare virtual LAN.

是否有这种做法有任何问题？

Is there any problem in that approach?

推荐答案

这是环境的假设，模拟尽可能多的ActiveDirectory安装成为可能，或者是它只是测试认证工作对一个DC？

Is this environment suppose to simulate as many ActiveDirectory installations as possible, or is it to just test that authentication works against a DC?

至少，你将要安装两个域控制器，主要和次要。您将要还设置帐户的各种帐户的状态（过期的密码，账号过期，帐户锁定等）。

At a minimum, you will want to setup two Domain Controllers, a Primary and a Secondary. You will want to also setup accounts with a variety of account states (password expired, account expired, account lockout, etc).

一些其他的问题需要考虑：

Some other issues to think about:

时域上运行一个Win2000的功能域？或Windows 2003的功能域？ 如果您有多个域，你会支持通用组成员？ 如果您有多个福里斯特斯，你会支持跨林信任关系？

Is your domain running as a Win2000 functional Domain? or a Windows 2003 functional Domain? If you have multiple domains, will you support Universal Group membership? If you have multiple forrests, will you support Cross-Forest Trust relationships?