Domain migration (merge child into parent) question

Posted on 2008-11-17
Last Modified: 2012-05-05
I've done a few domain migrations (merge child into parent) successfully using ADMT, however all have involved only a single DC on the child side.  My next migration has 2 DC's in the child.  My question is how should I do the migration?  Should I demote both DC's at the same time?  Should I demote one then promote it to the new domain before doing the other?  If I do them one at a time I'd assume the server holding the operations masters roles should be done second?
Question by:Tofu4679
    LVL 15

    Expert Comment

    It is the same process. install ADMT and point it at one of the DC's and migrate the accounts to the new domain, the two DC's should both be synchronized and will contain the same data.

    To move one of the DC's you need to move all the FSMO roles to the other DC:

    Then demote the server and then you can add this to the new domain.

    Of course if the DC's are the last computers, servers and users in the domain and all data has been moved you could remove the trusts to any other domains and just re-format the servers for whatever use you want as there will be nothing that relies on the servers.

    Author Comment

    The 2 DC's in the child domain are being promoted to DC's in the new domain after they've been demoted.  Just wondering if there is an order that should be followed or if it doesn't really matter.
    LVL 15

    Accepted Solution

    I believe that you would have potential problems trying to demote the last two DC's in a domain at the same time and would have to use the /forceremoval option to complete the task.

    This is why you would normally move the FSMO roles off the first DC to be demoted, and then wait for the changes to replicate before running dcpromo to demote the server.

    When you run this on the last DC in the domain it would ask you if this was the last DC server in the domain and should not therefore cause any errors.

    This is the recommended way to collapse the domain.

    Author Comment

    Thanks, all the FSMO roles are already on one of the servers so I'll just do that one last and close out the domain when I demote it.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Looking for New Ways to Advertise?

    Engage with tech pros in our community with native advertising, as a Vendor Expert, and more.

    There are two modes of restricted groups GPOs. Replacing mode:   Additive mode:   How do they work? Replacing mode: Everything (users, groups, computers) that is member of the local administrators group will be cleared out. After th…
    Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    14 Experts available now in Live!

    Get 1:1 Help Now