Dear all, Existing Domain: (123.com) Child Domain: (xyz.123.com) Req: Need to create Child Domain(xyz.123.com) in Forest, but the existing domain (123.com) should have full access of Child Domain Objects (xyz.123.com) & Child Domain (xyz.123.com) should not have access for existing domain (123.com).After installing the Child Domain in Forest ,how can Delegate the above mentioned Permissions. · Regards, Reg, Satam AmitDeva Self-trust is the first secret of success.

Please start reading this http://support.microsoft.com/kb/255248http://www.virmansec.com/blogs/skhairuddin

What do you mean by should not access for existing domain? If you mean the root domain resources then you should not give these users access to them that is all. To create you child domain, proceed like that: Make sure that your server is pointing to the correct DNS server Run dcpromo and promote the new DC so that you have got you child domain Once done, refer to Syed article for DNS delegation. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration