How to remove admin permissions AD DS when admin from one forests access resources in another forest?

Question

Hello Community
    A  forestA and 
a forestB exists on the network.
    In forestA, active directory has an administrator.
    In forestB, activre directory also has an administrator.
    There is a trust reletionship between the 2 forests.
    When the administrator for forestA  accesses resources
in forestB,  how can I make sure that the administrator in
forestA does not have administrative permissions in foresB?
    Thank you
    Shabeaut

Answer 1

They do not have access by default unless if you delegate that to them. For high secure environments, you might consider implementing a Selective Authentication: http://technet.microsoft.com/en-us/library/cc755844(v=ws.10).aspx
This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Get Active Directory User Last Logon
Create an Active Directory test domain similar to the production one
Management of test accounts in an Active Directory production domain - Part I
Management of test accounts in an Active Directory production domain - Part II
Management of test accounts in an Active Directory production domain - Part III
Reset Active Directory user password