Window 2003 SP1 AD Migration to Windows 2003 SP1 AD

I'm sure their are simple guides for this but i was wondering how easy it is to migrate from a child domain to a parent domain in Active Directory.  We have a parent/child setup, and want to simplify the configuration as their is no need to have this type of setup.  The problem is that 99.9 percent of all users, groups, policies etc run under the child domain and was wondering firstly what version of ADMT to use (2 or 3 or other?).  I have aquired a new server which is going to be a new DC (of the parent domain) that holds the main roles, and secondly does anyone know of a straight forward guide to this type of migration?  There seems to be lots of guides for nt to ad migration etc, but nothing for this type of migration?

Many thanks as usual

Who is Participating?
Chris DentConnect With a Mentor PowerShell DeveloperCommented:

MoveTree will happily move over user accounts, or entire OUs filled with User Accounts. It saves on migrating those; we've used it a number of times within our forest. As it preserves everything to do with the account it's quite pleasant.

Computers might benefit from ADMT (if it works) as it will rewrite the user profile and such for the new domain.

You might be able to Backup and Restore policies using Group Policy Management Console (I've never tried to restore to a seperate domain):

You can use ADMT to move user accounts, but because it's within the same forest you'll end up with a lot of complaints about conflicting usernames and such - very very messy.

Chris DentPowerShell DeveloperCommented:

Hi Leon,

I advise you use MoveTree and not ADMT if both domains are within the same forest.

It's part of the Support Tools and should be on your Windows Server CD. Documentation for it is here:

For user accounts they will have to be removed from any groups they are a member of prior to the move, but they can be added back in afterwards. It wouldn't be too tricky to script that kind of thing.

leontAuthor Commented:
Thanks for replying so quickly Chris.  So you would have to delete the user accounts and recreate them in the destination domain? it also says computer objects cannot be moved, so presumably they have to be re-added to the destination domain? and it also recommends recreating any policies on the destination domain.  Seems a long winded way of doing things but I sort of suspected as much.

thanks I will have a look at movetree,

Thanks again

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.