Hi all,
we are looking to establish a forest trust with another company (they will create a new forest, lets say - their.domain.com )
what is the best way to secure access to resources in our domain , lets say our.domain.local.
we need this security from the outset where we are about to estlablish trust between the two.
as the accound needs to be domain admin, can we delegate OU permissions to this domain admin account (which we provide to them) so it can only access resources in that OU and no where else and restricl all other access.
It would be great If you some of you could give advise.
regards