Mastering Active Directory - Second Edition

The restricted access forest model

In the restricted access forest model, a separate forest is created to isolate identities, and data must be separated from the other organization's data and identities. No trust is created between the two forests, so identities in one forest will not be able to access the resources in another. To access the resources in each forest, we need to have separate user accounts. The restricted access forest model provides data isolation:

In the preceding example, Rebeladmin Corp. is involved with a corporate divestiture process. For some of the assets, data and identities need to be isolated completely there. In ...