changing domain name from .com to .local

I currently have a AD server that does multiple roles- AD/ DNS/ File server/ printserver.  The domain is currently called domain.com, i would like to move AD and DNS to a new server and change it to domain.local .  The old server would only be used as a file and print sever.  What would be the best way to do this procedure? i want to be able to move the OU's and thier group policy over as well. Will i have to rejoin all the users to the new domain.local and move thier profile settings.
theITdudeAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

fishadrCommented:
To move to a new domain is a big task, you will have to create the new domain, create the trusts and then migrate all accounts and computers from the old domain to the new domain. Then the servers and environment.

You can do this using the Active Directory Migration Tool (ADMT) - which will move the accounts and computers (including profiles) to the new domain:
http://www.microsoft.com/downloads/details.aspx?FamilyID=ae279d01-7dca-413c-a9d2-b42dfb746059&displaylang=en
Robocopy could be used to copy the data to the new server and subinacl to migrate the Security on the files and shares from the old domain SID's to the new domain SID's:
http://www.analogduck.com/main/node/316/print

Ideally you need to backup everything, trial it and then phase the migration.

Or you could look at the Domain Rename tool:
http://technet.microsoft.com/en-us/windowsserver/bb405948.aspx

This would enable you to rename the domain quite simply. You could then add the new server to the infrastructure and move all the FSMO roles to the new server and then uninstall the old server and add back as a file and print server - probably would be a lot easier. - Again backup and test before implementing

0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
theITdudeAuthor Commented:
Thanks for the info.
Are there any advantages/disadvantages when using the Domain Rename Tool vs ADMT?
0
Brian PiercePhotographerCommented:
You can use the domain reanme tool if the server is running in Windows 2003 functional level - by why bother - renaming a domain is a complex task and is not without risk.  having an internal domain named .com is perfectly acceptable.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.