Good evening folks. Quick scenario I'm faced with.
Tomorrow i'm out at a site where they have two seperate domains (used to be two companys). They have merged together and now exisit on the same network. They would ideally like a single domain name to represent the new company.
Servers are running 2003 standard. They have multiple users / groups and machine accounts in both ad's.
I do not have any spare kit to use, other than possibly a laptop. I'm trying to not disrupt the service too much. But was thinking the following.
Create a new forest and domain on the laptop. Backup the two servers.
User ADMT to migrate accounts from each domain in turn, also doing computer accounts. Merge it all into a single domain onto the laptop. Dcpromo the other DC's for the old domains down. Dcpro them to replicate the new AD forest. Move over FSMO roles and GC. DCPromo the laptop down.
each 'company' only has a single server at the moment, so this would also give them a little resilicence for the single domain, over two dc's.
Obviously I would need to migrate all of the share's etc over also. I was going to use something like secure copy? Or does ADMT also do shares? I guess not.
I'ts ages since I have done anything with ADMT, since I originally did my initial MS 2003 course I think. For it to work I remember needing to setup a trust between the domains. Anything else?
Any advice would be appreciated. is there a better way to go about this?
The only other option would be to rename one of the domains, and then migrate the other domain accounts over too it?
Tomorrow i'm out at a site where they have two seperate domains (used to be two companys). They have merged together and now exisit on the same network. They would ideally like a single domain name to represent the new company.
Servers are running 2003 standard. They have multiple users / groups and machine accounts in both ad's.
I do not have any spare kit to use, other than possibly a laptop. I'm trying to not disrupt the service too much. But was thinking the following.
Create a new forest and domain on the laptop. Backup the two servers.
User ADMT to migrate accounts from each domain in turn, also doing computer accounts. Merge it all into a single domain onto the laptop. Dcpromo the other DC's for the old domains down. Dcpro them to replicate the new AD forest. Move over FSMO roles and GC. DCPromo the laptop down.
each 'company' only has a single server at the moment, so this would also give them a little resilicence for the single domain, over two dc's.
Obviously I would need to migrate all of the share's etc over also. I was going to use something like secure copy? Or does ADMT also do shares? I guess not.
I'ts ages since I have done anything with ADMT, since I originally did my initial MS 2003 course I think. For it to work I remember needing to setup a trust between the domains. Anything else?
Any advice would be appreciated. is there a better way to go about this?
The only other option would be to rename one of the domains, and then migrate the other domain accounts over too it?