Assessing Threat to A.D. Disaster - Child Domain Corruption

Giganews Newsgroups
Subject: Assessing Threat to A.D. Disaster - Child Domain Corruption
Posted by:  Jackson (Jacks…@discussions.microsoft.com)
Date: Tue, 28 Aug 2007

Hi,

I have a single Active Directory forest with (a) an empty root domain and
(b) 3 child domains.

I'm responsible for one of the child domains and the empty root. I'm trying
to assess what potenial risk to my domain and the forest itself in the event
that a remote child domain controller has corrupt data which replicates
throughout the forest.

I know that most data is domain specific, but from a security perspective,
could a child domain repliacte bad Configuration data to the forest and
disrupt other child domains (this may be intentional or unintentional)?

Does anyone know of any articles that discuss thie scenario (or comment that
it's not possible from a technical perspective?)

thanks,

Replies