Adaxes, permissions can be delegated across multiple domains and forests, even if they don't have trust relationships between them.
