We help IT Professionals succeed at work.

Check out our new AWS podcast with Certified Expert, Phil Phillips! Listen to "How to Execute a Seamless AWS Migration" on EE or on your favorite podcast platform. Listen Now

x

Need a checklist/planning for moving existing users from OLD to NEW Active Directory.

montgomeryshire
on
Medium Priority
629 Views
Last Modified: 2012-08-13
Hello folks,

I've never done this before, so was hoping to get some advice.  We have an existing AD server on say OLD.edu DNS domain space and need to retire that old 2003 server.  We are building a new 2008 windows server with a new DNS domain space called NEW.edu to replace the old one.  And of course all of our existing servers (web, storage, data, etc.) use/point to the main AD/DNS/DHCP for authentication and such.  Can anyone give some or complete advice/checklist/planning (things to do 1st, 2nd, 3rd, etc.) to accomplish this w/o causing too much downtime (if any at all) during this switch-over?

Thanks.
Comment
Watch Question

CERTIFIED EXPERT
Top Expert 2013

Commented:
If you just wanted to add the DC to the existing domain it would be much easier.   What you want to do is a full migration to a new domain.

Start with looking at Microsof'ts ADMT white papers and guides.

http://blogs.technet.com/b/askds/archive/2010/06/19/admt-3-2-released.aspx

Thanks

Mike

Author

Commented:
I'm always skeptical of migration tools.  We can't afford to have things to wrong or have weird unforeseen errors that might pop up causing delay.  

We are planning to just build the NEW server and add perhaps add everyone by hand or use a tool to just migrate ONLY users and computers maybe.

@Mike We recently changed our business name so we'll want to use a new DNS name.  If we join it to the existing domain, wouldn't it have the old DNS name?  (ie.  we want our current servers FILESERVER.OLD.EDU to have the new names like FILESERVER.NEW.EDU)
AwinishSenior Solution Architect

Commented:
Well, you can have the option of adding UPN name & ask user to login using UPN name but that's the just work around, there is no way to get the rid of domain name. Domain rename is a risky, personally would not recommend. For migration you can use ADMT, Quest or NetIQ.

Quest provide all in one like sql,exchange,AD, sms etc where as ADMT is free.So, you need to take a call.

Author

Commented:
@Awinish Would I be doing inter or intra-forest migration?  Also, we need to rename the domain, that is the purpose of the project and restructuring.

Thanks.
AwinishSenior Solution Architect

Commented:
If you are creating a new domain  in same forest where schema master & domain naming master is common will be intraforest, but if you create a separate forest with new domain name & migrate the object it will be inter-forest.

I would not recommend for domain rename,if you are running with Exchange 2007 & above, CA services you can't rename a domain.

MIGRATION is much better option than rename.
CERTIFIED EXPERT
Top Expert 2013

Commented:
I agree with the migration,   either way is going to take a lot of planning and testing.

Thanks

Mike

Author

Commented:
@Awinish thanks for the explanation.  So it looks like we will be doing an intra-forest migration creating a new domain (ABC.def.com) in the same forest (.def.com) as the old domain (XXX.def.com).  Not really sure if I call it a domain rename since we're not renaming the old server, simply retiring/replacing it with the new.
Senior Solution Architect
Commented:
Unlock this solution with a free trial preview.
(No credit card required)
Get Preview
Unlock the solution to this question.
Thanks for using Experts Exchange.

Please provide your email to receive a free trial preview!

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.