we are looking at being forced into an active directory forest as a child domain, with other child domains that aren't cleared to see the information we process on a daily basis.<BR>one of my concerns ...

‘’The really hard problem for customers is scaling forest-level recovery. Think of it as a tree, with multiple domains within a forest partitioned off based on things like work groups or geography.