Can we join the forest as a subdomain?
• No. Microsoft has changed their definition of a security boundary. A security boundary used to be a forest, but it is now a domain. A security issue was found regarding the way SIDs are transferred between domains in an Active Directory network and since we can delegate control of Organizational Units (OU’s) to select admins, there is really no advantage in running your own subdomain.
