Implementing selective authorisation

Hi all,

We currently have a customer who accesses our network via vpn and to allow them to connect to LANDESK (ServiceDesk) we've set up trusts between the domains and it all works perfectly. However, because of this our entire domain is trusted to them and they can see everything which is obviously a risk. We are looking into selective domains at the moment but if we implement this which of the LANDESK servers will they need authorisation for. We have the standard 1 App, 4 Web and a cluster SQL environment.

Any help much appreciated

Regards