• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 395
  • Last Modified:

Domain Migration across Forests

Currently have one 2003 domain (test) in one forest (forest A), another domain (test 2) in forest B, and a third domain (test3) in forest c. I am needing to combine forest B and forest C with forest A so there is one domain (test) and one forest (forest a). I was wondering what was the best way to accomplish this. Should i demote one of the DC's in the other two forests first and then join it to the test domain and start the migration that way. Does anyone know of a good whitepaper detailing this process a little more. TIA
0
beargonefishing
Asked:
beargonefishing
  • 3
  • 3
1 Solution
 
LauraEHunterMVPCommented:
You can use the Active Directory Migration Tool (free download from MS), or pay for a third party tool from the likes of Quest or NetPro.

The ADMT migration guide will get you started with the forest migration process: http://www.microsoft.com/downloads/details.aspx?familyid=d99ef770-3bbb-4b9e-a8bc-01e9f7ef7342&displaylang=en
0
 
beargonefishingDirector of Network InfrastructureAuthor Commented:
Right, already downloaded the v3 of the tool and the guide. But my question was regarding actual order of operations as far as the migration of users and objects go. Here is what i have so far:

1)Establishing two-way trans trusts between forest a and forest b and forest c
2)Demote a Domain Controller in Domain test2 and Domain test3, still leaving one maybe two on old domain for authentication, DHCP, DNS and the like
3)Promoting Domain Controllers in test2 and test3 to the test domain in forest a
4)Installing ADMT on spare PC
5)Migrating users and computers from domain test 2 and domain test 3 to domain test
6)Joining Exchange servers in domain test 2 and domain test 3 to domain test exchangeorg
7)Once all users/computers have migrated, begin migrating mailboxes
0
 
Jay_Jay70Commented:
i found when i did this, that i just created direct two way trusts, migrated users, and then did my DC's last, that way, in case of anything screwing up along the way, i could rool back to pretty much identical scenario as i started with....just my opinion
0
Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

 
beargonefishingDirector of Network InfrastructureAuthor Commented:
but couldn"t i achieve the same result if i left one domain controller connected to the old domain while i joined the other to the new domain
0
 
Jay_Jay70Commented:
as long as you have one left yes, but i have numerous, and didnt wat to thave to fall back to migrating 3 or 4 back across
0
 
beargonefishingDirector of Network InfrastructureAuthor Commented:
Ok, good advice. One more question. Do you recommend migrating over the service accounts and groups before starting the user migration. What are the proper steps?
0
 
Jay_Jay70Commented:
personally, i recreated service accounts...i dont know why i did, but for me it was safer to recreate them - probably unjustified crazy thinking, but hey i stare a screen 10 hours a day...
0

Featured Post

VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now