Mastering Active Directory

Resource forest model

In a resource forest model, a separate forest is used for resources. A resource forest does not contain any user accounts; rather, it contains service accounts and resource forest administration accounts. All the identities for the organization will be in a separate forest. The cross-forest trust created between forests and users for an organization forest can access resources in the resource forest without additional authentication. Resource forest models provide service isolation:

In the preceding example, Rebeladmin Corp wanted to isolate services into Resource forest as it's about to merge with another IT-service-providing ...