My company is currently implementing a forest for our company, but at the same time we have 3 separate companies that one day might either become there own or sold off. One of our network people wanted to make them child domains, but to get rid of them if they were sold or made separate we would have to demote all of the domain controllers.
The question that I have is there an easy way to break a forest so both domains in the forest stay intact, but don't see each other or do you need to make separate forest and then when something happens with the other company you just break the trust between the forest.
I think having two different forest is probably the only way to do it, but then the question arises if you could manage one forest from another. Can I possibily add users for Forest B, while I am in Forest A. I really don't want to keep going back and forth to different servers to manage users. Can you manage them from a single location?
The question that I have is there an easy way to break a forest so both domains in the forest stay intact, but don't see each other or do you need to make separate forest and then when something happens with the other company you just break the trust between the forest.
I think having two different forest is probably the only way to do it, but then the question arises if you could manage one forest from another. Can I possibily add users for Forest B, while I am in Forest A. I really don't want to keep going back and forth to different servers to manage users. Can you manage them from a single location?