New answers tagged federation
The only reasons to create a separate AD domain is to have a different password policy, to segment replication. You can minimize risk of a compromised DC only by having a new forest. Any domain in a forest can result in compromised Enterprise Admin credentials. The ADFS server must be trusted by both domains, so a Domain trust or a forest trust is needed. ...
Top 50 recent answers are included