I have been asked to come up with a solution to a minor nuissance that we are living with at the moment, and I hope my idea isn't too absurd or difficult to implement. We are development department in a company, and we want to isolate the development Windows servers in ther own domain, so that I can be domain admin in this smallish development domain without having admin permissions in the larger, company domain; also, we don't want any admin action on the company domain to affect the servers in the development domain, but we want to authenticate users against the company domain. Does this make any sense? The problem, as anybody can see, is that I don't know much about the subject, and the guys who do, are on another continent and don't have time, so I have to sort it out. I would be grateful for any constructive help or insight.