Sub-Domain Concept & 1000 Points

Hi Pros...
We have a forest and a single Child/Sub-Domain (worldwide) or lets say a single domain, At the moment we have a single forest e.g forest.com the root is empty,
but the child/sub-domain is where everybody is in (Single domain) e.g child/sub-domain.forest.com and the whole DCs are all in the child/sub-domain.forest.com as a single  domain...
now, i have to write a concept and plan, implenment how we can be able to move away from the sub-domain.... to our own sub-domain...any ideas???..

Thanks guys..;o)


agbor1960Asked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

JFrederick29Commented:
Do you mean you want to create a new domain within the same forest? or are you creating a new forest seperate from the existing one?

If you want to create a new domain within the existing forest, newdomain.forest.com.  You have to promote a server using dcpromo and create a new domain within the existing forest.  If you do not have another server available, you could run dcpromo on an existing domain controller (if you have multiple DC's) and demote it to a member server, then run dcpromo again and use that server as the DC for the new domain.  Just make sure that if you do that the DC you choose to demote doesn't hold any of the operation master roles for the domain.

There are also tools to migrate users and computers from one domain to another, like ADMT (Active Directory Migration Tool)

Is this something that could be accomplished using OU's instead of creating a new domain?

Or, if you are talking about something completely different then please explain further :)
0
agbor1960Author Commented:
We are a forest with a single Child/Sub-Domain for North America Europe and Asia Pacific all of us in a single domain with everyone having his DCs lets say 3 OUs and now the European
OU will have to be made a Sub-Domain of the exsiting forest (single domain...)

Forest.com

Child/Sub-Domain ( All the DCs or OUs NA EU & AP in this single child/sub-domain)

Thanks, plzz ask anything you want to know ...Cheers
0
JFrederick29Commented:
Then you need to promote a server to a Domain Controller and when you run dcpromo, select the option to create a new domain in the existing forest.  Once the domain is created, you can use a tool like ADMT to move the existing users from the European OU into the new European domain.  Are you adding the second domain for security reasons and could it be achieved by using group policy instead?
0
Big Business Goals? Which KPIs Will Help You

The most successful MSPs rely on metrics – known as key performance indicators (KPIs) – for making informed decisions that help their businesses thrive, rather than just survive. This eBook provides an overview of the most important KPIs used by top MSPs.

agbor1960Author Commented:
No, we are adding the Sub-Domains because of expansion reason (Aquisation etc) actually i have to write a concept....but i will have to read about the ADMT...so if i do it how you wrote it.....
everything should be ok..no data loss and and and and.....how about the UNC can i be able to keep the same name like the old???
0
agbor1960Author Commented:
I meant Acquisition... growth..
0
JFrederick29Commented:
Well the objects you move into the European domain will have a UNC of object.eu.forest.com instead of object.existingdomainname.forest.com.

Once you move the users into the EU domain, they will login to the EU domain as opposed to the existing.  There will be no data loss as you are only moving the AD objects.

Below is a link for deployment guides when using ADMT to migrate users and also step by step instructions on how to create a new domain within an existing forest.  You will want to migrate their SID History when using ADMT if you want them to still have access to resources in the other domain.  Read the articles and deployment guides for exact details on what you need to do but this should get you started...

You have Windows 2000 right, or 2003?

http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt.asp

http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q238/3/69.ASP&NoWebContent=1

http://www.microsoft.com/windows2000/technologies/directory/ad/default.asp

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
agbor1960Author Commented:
We have 2000....Well Mr. JFrederick29 THX a lot i will post a very simple question for you to pick up the remaining 500 points, a'ight...
I have read the ADMT from what i read it's pretty much what am looking for i think, and the links too are very helpful... thanks again...

Cheers for now...

Agbor1960
0
JFrederick29Commented:
You're welcome and good luck on your project!
0
agbor1960Author Commented:
THX, Cheers
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Networking

From novice to tech pro — start learning today.