Parent and Child Domains in Windows Server 2012 R2

I'm currently working on a SharePoint development project and I'm trying to build my development environment.  All of our servers are Server 2012 R2 (which I love).  For the virtualization, Hyper-V 2012 R2 is in place (which I don't love so much; I'm a VMware person, but I try to keep an open mind.)  The client that I work for (internal) has a System Admin who has been reluctant up to this point to allow me any type of domain access to the environment so that I can construct my servers and apps as needed.  I respect that because I've only been with them a few months and people's level of comfortability varies.

Here's my challenge.  I was trying to determine a way that I could have "isolated" domain admin access without threatening their production environment.  My first thought was that if a child domain was constructed (my DEV section given an  OU of DEV), then I thought it would be possible to limit my domain admin access to that child domain specifically.  I thought that it would not be forced to inherit access permissions from the parent.  When I submitted that idea, I was informed that even in a child domain, I wouldn't have permissions on the hypervisor; as they're in the parent and they don't have any additional hypervisor boxes.

I'm not sure that I'm following his logic here.  He may be correct but it sounds like we're talking about two separate things.  Rather than lose any more sleep trying to untangle my confusion, I decided to put the question to you....

Is it possible to establish a child domain within a Windows Server 2012 R2 forest (which is on Hyper-V 2012 R2) and not have admin access to the parent domain?

I thank you in advance for your help in this.  I feel like it's Monday and my brain is Jello.  I apologize for the noob question.
Miguel Velez-WhiteSr Systems EngineerAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Manikandan NarayanswamySecurity Specialist & IBM Security GuardiumCommented:

Yes its definitely possible to create a child domain in Hyper-V on Windows Server. As far the admin access is concerned the administrator will have admin access only on the child domain because his user account would be the member of domain Admin group. He won't be having any access on the parent domain unless you manually add him to the Enterprise Admin group of parent domain. Instead of creating a child domain you can also think of creating OU on parent domain and configuring a user to having Admin rights only within the OU container. Outside of the OU it would be treated as a normal user.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2012

From novice to tech pro — start learning today.