Suppose we have an Active Directory domain with the following structure:
Here are some common scenarios: