Domain Moves

Posted on 2009-04-20
Last Modified: 2012-05-06
I have a couple of domains. a.local, b.local, c.local etc....  I want to move all domains to one domain (a.local).  All of these sites are connected to a.local via a site to site vpn w/ pix or L2L via ASA.  Each domain has their own domain controllers and they authenticate locally.  What do I need to do to move these domains to a.local?  What steps should I take prior to the conversion?  I am going to start with our smallest domain and work my way to the largest.  I just want to make sure that I don't forget anything as this is a production environment.
Question by:PC4N6
    LVL 57

    Accepted Solution

    Do you have a test lab or environment?  That is the first thing you will need as you will definitely want to test out any migration plan first.  
    What I would start with is making a decision on the migration tool.  You have some choices.  For a free tool Microsoft's Active Directory Migration Tool is what you will go with.
    If you have money for a third party tool you can look at offerings by Quest or NetIQ.
    What you need to do is once you pick a tool just try to become very familiar with it and read all the documentation.  To start of for ADMT they have a 300 page whitepaper
    How many objects in these domains?

    Author Comment

    Hey Mike,

    Thanks for the info.  It has taken me some time to read through the big ass manual!  I have a couple of questions in regard to this move.  I will be using the free Microsoft ADMT v. 3.  Right now all of my domains have users that use terminal services through Citrix.  Now, our Citrix servers are already in the target domain.  Each of those users has an AD account already in that domain just for Citrix access.  We use a login script to do all of the mappings for Citrix.  I guess the big question is what is going to happen when I migrate user accounts from the source domains to the target and they already have AD accounts?  How do I deal with this issue?  Would this be a good time to make a change to our naming convention for our users (so that we can standardize across the board) ?  Also, what about any "generic" accounts (user) that use multiple computers on the LAN?  I am wondering how the computer migration will deal with the profiles....  Are we going to need to authorize ISA and or DHCP once the migration is complete?

    Thanks a lot for any/all input you may have!

    Featured Post

    Highfive Gives IT Their Time Back

    Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

    Join & Write a Comment

    On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
    ADCs have gained traction within the last decade, largely due to increased demand for legacy load balancing appliances to handle more advanced application delivery requirements and improve application performance.
    This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    24 Experts available now in Live!

    Get 1:1 Help Now