BritishJ

Then you start getting things like Azure AD Sync etc. It’s best practice one domain per client. Not trying to make one domain work for multiple different clients.

He said 15 VM’s running for clients. Now you would want to secure these clients from each other, restrict east to west movement. Adding them all on the same domain introduces security risk, reducing them risk and hiding clients from one and other in the same domain would take lots of effort. So just don’t put yourself in that situation and use multiple domains one domain for each client.

Well by the sounds of it, he has multiple clients. So then we’re talking multiple domains in a forest. Securing it all and doing it properly.

So it’s a bit more than just running the domain setup wizard and joining the servers.

Valimail also has a free tier. We use the paid version and it was absolutely the best DMARC tool on the market, when we did our research. Depending on the reseller in your region depends on the price. We actually found it to be cheaper than most and offer the best feature set.