Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium


Migrating/Collapse Child Domain into Parent

Posted on 2008-11-14
Medium Priority
Last Modified: 2012-05-05
I am charged to collapse a child domain into a parent domain and have the following requirements:
child domain controller will become DC of parent domain
user/group accounts be moved into the parent AD structure
machine accounts will be able to seamlessly logon to parent domain with existing user names and no funniness on local profiles.
I have used the ADMT tool before and uhh well i was wondering if there was a more simple approach to this that someone has done already (my experience was a cross forest migration and it was somewhat ugly)

Question by:pacman_d
  • 5
LVL 18

Expert Comment

ID: 22962052
ADMT is going to be your best option here if there are a lot of users.

Personally, I'm a fan of clean installs, so the last child fold-up I did (actually have another one coming up soon), I migrated the users by hand, reassigned their permissions, re-added them to groups, etc..

I was able to preserve all their data, including mailboxes, but it wasn't exactly seamless.  For about a week afterwards I would get calls about little things they used to be able to get to, but couldn't now.  Things they used so infrequently they forgot to tell me about them, and I forgot to reset them.  Good thing there was only 10 users left by the time it came down to folding up that domain.

Either way you go about it, it won't be easy/fun/seamless.

Best of luck,

Author Comment

ID: 22977458
anyone else?

Author Comment

ID: 22985318
my big questions I guess still are:
using ADMT to migrate the computer accounts.
path to demoting the child domain DC re-promoting to DC in the parent domain and not losing any share/file permissions on the file server data on the machine
Simplify Active Directory Administration

Administration of Active Directory does not have to be hard.  Too often what should be a simple task is made more difficult than it needs to be.The solution?  Hyena from SystemTools Software.  With ease-of-use as well as powerful importing and bulk updating capabilities.


Author Comment

ID: 23029031
Anyone on the demotion of a DC that also is the file server for the child-domain in question?

Author Comment

ID: 23160629
so I ran a test from the destination (parent) domain side and started to do my test group first.... but the Migrate group SIDs box is greyed out. I have only done this cross forest, not with child/parent domains... anyone?

Accepted Solution

pacman_d earned 0 total points
ID: 23160679
sorry... also wanted to mention that these greyed out boxes appear to have "checkmarks" in them. Checked the parent/child trust it is there and SID filtering is disabled.

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

How to deal with a specific error when using the Enable-RemoteMailbox cmdlet to create a mailbox in the cloud-based service, for an existing user in an on-premises Active Directory.
It’s time for spooky stories and consuming way too much sugar, including the many treats we’ve whipped for you in the world of tech. Check it out!
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.

578 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question