[ActiveDir] Protecting Domain Data in Forest

[JMiller]

I have a very strange delemma here...

One of our domains has a server with sensitive data.  The IT director of this domain has decided that some of the information contained on this server cannot be seen by anyone from the other domains ( even including the Enterprise Admins in our forest ).  This server must also remain connected to it's domain and available for non-protected data, SMS hotfixes...  Is this even possible to do?

My boss has also stated that he does not want a seperate forest and domain for this server because of the extra upkeep.  Although, an extra password to encrypt data for the users would be allowable.  Are there any products that could get this done?  Has anyone else ran into this problem?


Thanks,

Jonathan