Building AD from Scratch

We have AD Infrastructure in the company ,m asked to build  AD from the scratch on server 2012 with new domain and then just migrate the OU's . we will have 1 physical DC and  1 Virtual DC  at one  site and One physical DC in other site.We have two main sites distance between them is 2000 miles. Company is about 250-300 users , how would I go about it ?
iFixedITAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Will SzymkowskiSenior Solution ArchitectCommented:
If you plan on only migrating OU's then all you need to do is extract your current OU structure of your current domain and import that using powershell into the new one.

If you are looking to migrate AD objects as well as OU's and have this communicating while you are doing the migration then you will need to do the following...
- create a new Forest Root Domain on 2012
- setup DNS between the 2 domains
- create a forest trust between your old and new domain
- use ADMT (active directory migration tool) in the source domain to migrate users to the new domain
- use SIDHistory for backward compatibility to the old domain once the ad objects have been moved to the new domain

Setting up a new domain is very easy
- install 2012R2 on a server
- add the active directory domain services role
- promote the server to a DC
- follow the on-screen wizard to complete the processs (internal fqdn etc)

Once that is in place use the ADMT to migrate the users.
https://connect.microsoft.com/site1164/program8540

Step by step guide for ADMT setup
https://blog.thesysadmins.co.uk/admt-series-1-preparing-active-directory.html

Will.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
iFixedITAuthor Commented:
Thanks for the quick response Will. already have 2008 AD in environment. Needed to built 2012 AD from scratch with DNS and new domain, then only migrate the OU's. Basically new environment with fresh 2012 AD .
Will SzymkowskiSenior Solution ArchitectCommented:
That should not be hard at all then. Glad to help!

Will.
Your Guide to Achieving IT Business Success

The IT Service Excellence Tool Kit has best practices to keep your clients happy and business booming. Inside, you’ll find everything you need to increase client satisfaction and retention, become more competitive, and increase your overall success.

yo_beeDirector of Information TechnologyCommented:
I know you already awarded point to this question, but you also mentioned multiple sites as well as VM's.
I have a some questions which were not addressed.

1st: How many hypervisors are you going to run in your environment?

2nd: Are you planning to run Hyper-v as your hypervisor and have this running as a role on your DC?  

3rd: How do the offices connect to each other?

You will need to setup your Sites & Services correctly.
iFixedITAuthor Commented:
Thank you

One physical Dc and one virtual running on VMware and the other site will have Physical DC too
offices connect through WAN link
yo_beeDirector of Information TechnologyCommented:
Good to hear that

Just make sure you add the subnets and your sites that clients communicate on to Sites & Services. After you do that assign the subnets to the correct site.

This will control how clients communicate with the various DC's. If you do not set this up or set it up incorrectly then it becomes a round-robin call to any one of your DC's.  Being that your sites are 2000 miles apart this can result in slow logins and DNS calls.
yo_beeDirector of Information TechnologyCommented:
Here is a link that will help explain it more and set it up correctly.

https://technet.microsoft.com/en-us/library/cc730868.aspx
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Active Directory

From novice to tech pro — start learning today.