Sharepoint security setup using AD for authentication.
I need some assistance in the best way to setup AD for sharepoint users. I have a new extranet (locally hosted server) and the authentication they need to use is AD. I obviously have AD setup already for the local domain. Should I create a whole new forest etc to keep it completely separated, or is a separate OU good enough? I want to insure these external users have no more access than they need for the extranet (sharepoint 2013 site) to work.