Mastering Active Directory - Second Edition

The resource forest model

In a resource forest model, a separate forest is used for resources. A resource forest doesn't contain any user accounts; instead, it contains service accounts and resource forest administration accounts. All of the identities for the organization will be in a separate forest. The cross-forest trust that's created between forests and users for an organization forest can access resources in the resource forest without additional authentication. Resource forest models provide service isolation:

In the preceding example, Rebeladmin Corp wanted to isolate services in Resource forest as it's about to merge with another ...