Merging Windows 2003 Domains in same Forest

We currently have 7 domains. The root domain is company.com and the child domains are x.company.com, y.company.com, etc... We have an Exchange 2007 server that is located in the root domain and file/print servers that are located throughout the child domains. What would be the simplest way to merge all the domains into the root domain?
hecoAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

tomo999Commented:
You're probably going to have to migrate all the resources from the child domain in to the root domain, and then demote each DC in the child domains until all the child domains are gone.

http://www.microsoft.com/downloads/details.aspx?FamilyID=6f86937b-533a-466d-a8e8-aff85ad3d212&displaylang=en
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
hecoAuthor Commented:
I'm not a big fan of ADMT. Is there a way to merge the entire child domain into the parent transparently?
0
tomo999Commented:
Not that I know of I'm afraid.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

LauraEHunterMVPCommented:
tomo999 is correct - to do what you are describing, your only option is to use a domain migration tool.  ADMT is free, or use a third-party tool from the likes of Quest/NetPro/etc.  I like the Quest toolset a lot, but it's priced by the seat and depending on your budget could knock out out of your chair.
0
hecoAuthor Commented:
That's no fun. I was hoping that since they were in the same Forest there would be an easy way to consolodate them.
0
LauraEHunterMVPCommented:
Unfortunately, there is not. A domain migration is your only option in the scenario you have described.
0
Jay_Jay70Commented:
Im intrigued as to why you dont like ADMT...its personally one of my favorite tools, simple, efficient, reliable, and well supported....it is the Perfect utility for what you want to do & its free.....couldnt really ask for more in my opinion
0
cjpalmerCommented:
If I may ask, what is your onus for wanting to do this? From a security standpoint, having a root domain can allow you to isolate certain permissions from people who have Domain Admin level access in other domains. Specifically some of your FSMO roles and Enterprise Admin type stuff.

I started typing this yesterday and didn't get back to it until just now.

Charles
0
LauraEHunterMVPCommented:
> "having a root domain can allow you to isolate certain permissions from people who have Domain Admin level access in other domains"

This is not the case, and has not been so for several years.  Microsoft recommended the "empty forest root" for the reasons you indicate in the early days of Windows 2000, until someone very quickly discovered that a DA in a child domain can trivially elevate their permissions to that of an EA.  This is why all Microsoft documentation since 2003 has indicated that the domain is not a security boundary but an administrative one.  
0
cjpalmerCommented:
Thank you Laura. I remember reading that now. I am not working with domains and the like as much any more (more concentrated on SQL and imaging).

Charles
0
hecoAuthor Commented:
Thank you everyone for providing input. The original reason that we had multiple domains was for security. We want to migrate them into one domain for manageability purposes.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.