Transfer domain computers to a new domain without downtime

Posted on 2012-04-02
Last Modified: 2012-06-07
Hello experts,

We have existing  windows 2008 r2 domain, with several servers and approx 200 member workstations.  now domain name is We want to impleemnt microsoft exchange and sharepoint services in our organizaton and need to prepare infrastructure for that. to make all dc-s are healthy and to rename domain to

We plan to install new servers, set up active directory domain and then somehow migrate all existing servers and workstations to this fresh domain and then completely remove old domain and reinstall old dcs..  Is it possible to achive this with minimum downtime and configuration headaches? Can we avoid creating new profiles for existing users? ADMT tool can transfer users and groups between domains, but i don't think it can handle all of this. can you help me with detailed guide in my situation?
Question by:guramn
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
  • 2
  • +3
LVL 17

Accepted Solution

Anuroopsundd earned 125 total points
ID: 37795671
for Smooth migration of machines/accounts/permissions/profile you can look for some tools like quest

Expert Comment

ID: 37795757
You can set up the new domain and create a trust relationship between them.  Then you will be able to move computers/users/groups/etc without downtime.

Quest does have good migration tools.  Use them if you have the money in your budget.  Otherwise you should be able to migrate manually with the trust relationship in place.

Author Comment

ID: 37795824
but once i remove old domain can users still be able to logon to new domain, as trust relationship won't exist
Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

LVL 17

Expert Comment

ID: 37795838
you will require to migrate the users and computers to new domain then remove the old domain.

Expert Comment

ID: 37795945
Once a two way trust relationship is in place, you will be able to move your users, groups, policies, etc over in a controlled manner.  You won't have to rush everything to be done during a set period of downtime.

Author Comment

ID: 37797258
can ADMT handle  all these?

Expert Comment

ID: 37797331
The Active Directory Migration Tool should be able to handle just about everything you need.  About the only thing extra would be your group policies.
LVL 19

Assisted Solution

suriyaehnop earned 125 total points
ID: 37797693
Based on my previous project:

1. Setup new domain,
2. Set conditional forwarding on DNS server on both domain so that each domain can pingable.
3. Set a Forest Trust ( 2 ways)
4. Install ADMT/Password Export services (if you want to retain user's password from old domain). Please refer to link
5. On new domain, create a OU structure same as old domain.
6. User ADMT to move users and group from old domain to new domain.
7. Install Microsoft Exhcange server on new domain
8. Move mailbox from old domain to new domain
LVL 17

Assisted Solution

by:Tony Massa
Tony Massa earned 125 total points
ID: 37799339

Assisted Solution

robdl earned 125 total points
ID: 37801332
The above link by tmassa99 is excellent. This link here provides a little more step-by step.

This is actually very easy to do speaking from experience.

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

After hours on line I found a solution which pointed to the inherited Active Directory permissions . You have to give/allow permissions to the "Exchange trusted subsystem" for the user in the Active Directory...
Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
This video demonstrates how to sync Microsoft Exchange Public Folders with smartphones using CodeTwo Exchange Sync and Exchange ActiveSync. To learn more about CodeTwo Exchange Sync and download the free trial, go to:…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question