Implementing domain isolation
IT pros and network administrators are most likely familiar with the concept and application of network isolation, where networks have unlimited physical and logical network segmentation or micro-segmentation. There are a variety of reasons to do this, and a few examples include attempting to keep traffic localized to devices for speed and efficiency and it being a great way to increase network security.
Within a Windows Server-based networking environment, you can achieve isolation between server and domain resources, thus limiting access to authorized and authenticated computers to prevent unauthorized devices from gaining access to server and domain resources. The design of this approach typically includes a network with a firewall and connection security policies that ensure expected traffic and authentication requests are allowed while unexpected or unsolicited traffic is dropped or rejected by both the firewall and the configured connection security...