Moving all oblect from root doamin to ne child domain


Probably this question has been asked but here we go again.
At the moment we have a single domain (abc.local) this domain has:

19 Domain Controllers
9 Exchange Servers
400 users Accounts
400 computer accounts
19 NAS servers

These servers are spread over 19 geographical locations, with 19 subnet sites and are linked by a fully meshed MPLS cloud.

Now we are about to create a Canadian Domain which will have DC,s Exchange servers etc.
At the moment they 300 CA users have account on our servers to forward email to the CA email domain.

My boss wants a root domain called abc.local with 2 child domains called and

So I need to create these child domains and move everything from abc.local to bar the first DC.

We can add DC and exchange servers to the when we upgrade them.

I have some questions.

1.      Is this possible, is so how complicated is it.
3.      At the moment users logon to abc.local when they logon to will it create a new user profile? (Dont want to have to configure 400 computers again).
4.      How will this effect permissions etc will we have to visit each site to move DC and exchange servers to the new sub domain?
Thanks in advance
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

BrianIT ManagerCommented:
Hi George,

1.  Is it complicated?  In short yes it will be complicated but that doesn't mean it can't be done.  You will want to get your hands on a couple different migration tools to see which works best for you.  I've just completed a major migration and used Microsoft's ADMT.  One of the main factors was cost, ADMT is free.
2.  I love questions like this.  :)
3.  Users will still be able to log on with their abc.local account because that is their primary UPN.  That will not change during the migration.  In fact you can if you want modify that but it sounds like you don't want to.
4.  You will want to ensure that you use SID history with your migration.  This will attach the old SID with the new account along with its new SID.  This allows you to access all of the resources you could access previously.  
5. Another one of my favorite questions.

georgestarkAuthor Commented:
Thanks fro the reply

with regard to question 3 i thought Canadian users will logon to and uk users would logon to my worry is UK user who originaly loged on to abc.local will create new usere profiles.
bare in mind that all resources that were in abc.local are now in

sorry about the missed questions damn word and auto numbering.

BrianIT ManagerCommented:
Depending on how the users log on they would just select their domain by short name...UK or CA.  If they log on with their UPN (user@domain.local) then the domain box would grey out and it would log them into the domain without it.

Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

georgestarkAuthor Commented:
Sorry Brian
At the moment users logon with usernam and the doamin abcthis is where all NAS  and exchange severs are.
when I move all these servers to, wont users have to logon here and not the now empty domain abc.local.

BrianIT ManagerCommented:
Yes they will log on to the new domain name...and yes it will create a new profile because of the new name.  However migration tools (ADMT included) can also migrate profiles.
georgestarkAuthor Commented:
This could be an issue, usesr would lose all desktop and profile settings held locally.
if say UK users still loged on to abc.local would they still have access to servers in the

BrianIT ManagerCommented:
The migration tool would be run on the clients and it would copy the files and ACLs to the new profile from the old profile. I'm not sure you want to keep the source account in that users can become confused if there are multiple accounts.  Usually with migrations within the same forest the account is moved and thus it would not exist in the forest root domain.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
georgestarkAuthor Commented:
Thanks for your help on this Brian
BrianIT ManagerCommented:
Anytime...let me know if you have any further questions.  Migrations require a lot of planning to be successful.

It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.