Where you can't trust domains treat the servers like a workgroup and follow my guide at the link provided 😉
-----------------------------------------------------------------------------------------------------------
"Ya can't make an omelette without breaking just a few eggs" 😉