I'm here because I'm yielding to those who have much more experience of which what is probably a simple process. In the end I'm hoping for somewhat of a step by step process. I'm a novice at AD and while I'm sure I could patch this project together, I was hoping to do something "the right way" for once.
I'm currently at a small school district which has recently gone through a name change. The network consists of 4 sites with a single MS 2008 DC at each location. The system is running well, but the name of the domain is inconsistant with the rest of the organization.
I'm sure the system would operate just fine if I left it alone, but I guess I'm a glutton for punishment because I'd like the naming to be congruent with one another.
Through research I've found that there are basically three options for my scenario:
1.) Complete rebuild of a new domain and then migration.
2.) Rename current domain
3.) Create a two domain structure with trusts.
I would prefer to do a complete rebuild as I feel I'll have a better understanding of the layout instead of any underlying configs from the previous administrator.
My problem is that I do not have funding for additional boxes to facilitate a proper test lab. I need to somehow utilize the current boxes while allowing the current domain to remain operational until I migrate the users and machines to the new domain. I do have solid backups of the current structure to fall back on.
Approx 400 end user devices (mostly xp sp2)
Approx 15 production server (2003 & 2008)
AD is relatively straight forward, nothing complicated just users, computers, and security groups
CA is not involved
MS Exchange is not involved
Can I utilize the current DCs to bring a new domain?
Will it be completely independant?
Will I need to touch every asset in order to join it to the new domain?
Is what I'm about to do stupid?
I'm open to any and all opinions
Thanks in advance.