We exist in a big enterprise (with an active directory where we cant get administrator privileges obviously) and would like to setup a local Active Directory for our development department.
This question is part of a case I can present to the enterprise AD people, defining exactly what we need from them. I do not propose to do this task without them doing some action on their part.
We would like to be able to use our enterprise AD users in our local AD.
In this local AD we would like to put our development servers, some of them will be provisioned from golden images and thrown away on hourly basis or faster.
Part of this exercise is that we want to login to servers existing in our local AD with users existing in the enterprise AD. Using enterprise AD as authentication and our local AD as authorization.
Is this a child domain or an external domain with one-way trust?
Can anyone educate me a bit, maybe with some ideas on how to setup a lab in such a way that we can test against the enterprise AD without having admin privileges in it.