[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 342
  • Last Modified:

Moving all oblect from root doamin to ne child domain

Guys

Probably this question has been asked but here we go again.
At the moment we have a single domain (abc.local) this domain has:

19 Domain Controllers
9 Exchange Servers
400 users Accounts
400 computer accounts
19 NAS servers

These servers are spread over 19 geographical locations, with 19 subnet sites and are linked by a fully meshed MPLS cloud.

Now we are about to create a Canadian Domain which will have DC,s Exchange servers etc.
At the moment they 300 CA users have account on our servers to forward email to the CA email domain.

My boss wants a root domain called abc.local with 2 child domains called UK.abc.local and CA.abc.local.

So I need to create these child domains and move everything from abc.local to UK.abc.local bar the first DC.

We can add DC and exchange servers to the CA.abc.local when we upgrade them.

I have some questions.

1.      Is this possible, is so how complicated is it.
2.      
3.      At the moment users logon to abc.local when they logon to UK.abc.local will it create a new user profile? (Dont want to have to configure 400 computers again).
4.      How will this effect permissions etc will we have to visit each site to move DC and exchange servers to the new sub domain?
5.      
Thanks in advance
0
georgestark
Asked:
georgestark
  • 5
  • 4
1 Solution
 
mkbeanCommented:
Hi George,

1.  Is it complicated?  In short yes it will be complicated but that doesn't mean it can't be done.  You will want to get your hands on a couple different migration tools to see which works best for you.  I've just completed a major migration and used Microsoft's ADMT.  One of the main factors was cost, ADMT is free.
2.  I love questions like this.  :)
3.  Users will still be able to log on with their abc.local account because that is their primary UPN.  That will not change during the migration.  In fact you can if you want modify that but it sounds like you don't want to.
4.  You will want to ensure that you use SID history with your migration.  This will attach the old SID with the new account along with its new SID.  This allows you to access all of the resources you could access previously.  
5. Another one of my favorite questions.

Thanks,
Brian
0
 
georgestarkAuthor Commented:
Brian
Thanks fro the reply

with regard to question 3 i thought Canadian users will logon to ca.abc.local and uk users would logon to uk.abc.local. my worry is UK user who originaly loged on to abc.local will create new usere profiles.
bare in mind that all resources that were in abc.local are now in uk.abc.local.

sorry about the missed questions damn word and auto numbering.

Warren
0
 
mkbeanCommented:
Depending on how the users log on they would just select their domain by short name...UK or CA.  If they log on with their UPN (user@domain.local) then the domain box would grey out and it would log them into the domain without it.

Brian
0
Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 
georgestarkAuthor Commented:
Sorry Brian
At the moment users logon with usernam and the doamin abcthis is where all NAS  and exchange severs are.
when I move all these servers to uk.abc.local, wont users have to logon here and not the now empty domain abc.local.

Warren
0
 
mkbeanCommented:
Yes they will log on to the new domain name...and yes it will create a new profile because of the new name.  However migration tools (ADMT included) can also migrate profiles.
0
 
georgestarkAuthor Commented:
Brian
This could be an issue, usesr would lose all desktop and profile settings held locally.
if say UK users still loged on to abc.local would they still have access to servers in the uk.abc.local

Warrne
0
 
mkbeanCommented:
Warren,
The migration tool would be run on the clients and it would copy the files and ACLs to the new profile from the old profile. I'm not sure you want to keep the source account in that domain...now users can become confused if there are multiple accounts.  Usually with migrations within the same forest the account is moved and thus it would not exist in the forest root domain.

Brian
0
 
georgestarkAuthor Commented:
Thanks for your help on this Brian
0
 
mkbeanCommented:
Anytime...let me know if you have any further questions.  Migrations require a lot of planning to be successful.

Brian
0

Featured Post

Get quick recovery of individual SharePoint items

Free tool – Veeam Explorer for Microsoft SharePoint, enables fast, easy restores of SharePoint sites, documents, libraries and lists — all with no agents to manage and no additional licenses to buy.

  • 5
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now