Hans Erik Storeide's Profile

Locate all segregated groups in a single forest with multiple domains. Each
segregated group stores user data in a separate domain, and the global catalog
would provide information from the directory.

This partitioning of the GAL is provided by access control lists associated with
global group memberships. For each organizational unit containing a segregated
group, a global group must be created. The global group membership is the users
of the segregated group located in the OU. Use this group, together with other
permission changes, to provide a view of Active Directory specific to the
segregated group located in the organizational unit.