Building a Multi-Domain AD Forest
I deployed a proper Active Directory forest with microsoftlab.ch as the forest root and corp.microsoftlab.ch as a child domain.
This mirrors enterprise architectures where the forest root is kept clean and child domains handle user accounts. The trust relationships are automatic and transitive.
DNS integration was the trickiest part - conditional forwarders and proper delegation are essential.