Good Evening,

I was hoping you could help....

I recently joined a forest as a domain tree, and was
hoping that someone could clarify something for me. I was
wondering if it is possible to block the root of the
forest from making modifications to my user accounts in
active directory. I am able to make modifications to any
domain in the forest, however no domain can make
modifications to my active directory users.

How do I prevent the root domain from making changes to
other domains in the forest?

Thanks