How to separate part of a Windows 2008 R2 domain and then add it to another forest?

One of our clients just sold one division of their company. They run two locations with basically a domain controller, terminal server, and file server at each location. They need to do two things:
1) Separate out one location so it is an independent domain.
2) Integrate that new domain into the existing framework we are moving into. I believe that this is a network running a 2008 R2 level domain.

So basically, I see two ways of doing this. Please let me know if I am on the right track, post any good links, and answer anything directly and simply if you can. I am not looking so much as the detailed explanation of how to do this, but more an overview of strategy to let us know the best way to proceed. Detailed questions would be introduced as further questions.

First way:
Separate out one location as its own domain and then join that to the existing forest.
1)_ Is this possible?
2) Is it a good idea?
3) Would this work if the new domain is 2012?
4) Any serious potential pitfalls?

Second way:
Remove the servers completely from the domain and then join them to the existing domain of the new owners.
1) I know this is possible, but is this a good idea? Better or worse than the first idea?
2) Will this work with Windows server 2012?
3) Any serious pitfalls?

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

David Johnson, CD, MVPOwnerCommented:
The second way is the better of the two. as you will be removing remnants from the originating domain.
Second way requires the migration of the existing users/systems to the new domain first before along with their files..

For the first option
Is  the setup branch1.addomain and branch2.addomain that were part of the same forest, or
where they all on the same addomain?
In the earlier example, a trust can be broken between branch1 and branch2 at which point branch1 can establish a trust with the new domain/become a member of a new forest.
Will SzymkowskiSenior Solution ArchitectCommented:
This really depends on how many servers and also permissions as well.

So you have to look at it this way. Do you want to spend more time during the initial setup? or spend more time after the machine have been moved?

If you setup a tust between the 2 Forest and use the ADMT to migrate the users from one forest to another the initial setup will take a sometime to setup and configure. However, once this is in place you can easily move the objects seamlessly with no downtime or reconfiguring permissions.

The other option is like you said "remove the machines from the domain and re-add them to the new one". This option takes less inital time to move the AD objects to the other domain. However, once you have moved the objects to the new domain you are going to have to re-assign NTFS permissions shares etc.

If you only have a few objects (servers) to move over and from a permission standpoint there is not a lot to configure then removing them from the domain and re-adding them to the new forest would be the most appropriate method IMO.

Ultimately it is up to the business but you can use both method i have axplained to accomplish what you are trying to do.


Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
JesusFreak42Author Commented:
Thanks all. This information is very helpful.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.