how to add domains in windows server 2008

Posted on 2014-08-13
Last Modified: 2014-08-19
I would like to know how to create virtual domains.
I have a domain DOMAIN on my system (names are changed to protect the innocent).
I would like to add DOMAINDEPT to the enterprise as a, for the lack of better terms, subdomain.
What I want to do is enable on of my departments full domain priviledges on their "subdomain", but I can protect the rest of DOMAIN outside of it.

Is this possible? if so, how do I do it?
Question by:Evan Cutler
    LVL 77

    Accepted Solution

    In active diretory we have
    forests, domains, subdomains
    You can create a domain in a new forest, add the domain to the existing forest or create a subdomsin i.e. is a subdomain of what you seem to want to do is create a new domain in an existing forest or create a domain in a new forest
    LVL 9

    Author Comment

    by:Evan Cutler
    I have people who I would put in the "subdomain" who need domain privileges.  I do not want to give them domain admin privileges to the parent network.  They purchase computers and attach/detach at will due to some wierd form of mobility aspect.  I was thinking about adding a subdomain, and giving them their own sandbox for them to break without take me down with them.

    Would this be practice?
    LVL 77

    Assisted Solution

    by:David Johnson, CD, MVP
    a domain admin only has privileges on that particular domain, and enterprise admin has privileges on the entire forest
    LVL 9

    Author Closing Comment

    by:Evan Cutler
    Thank you very much.
    I will start my development from there.

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    BIND is the most widely used Name Server. A Name Server is the one that translates a site name to it's IP address. There is a new bug in BIND (, affecting all versions of BIND 9 from BIND 9.1.0 (inclusive) thro…
    Even if you have implemented a Mobile Device Management solution company wide, it is a good idea to make sure you are taking into account all of the major risks to your electronic protected health information (ePHI).
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor ( If you're looking for how to monitor bandwidth using netflow or packet s…

    755 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now