Migration of domains in seperate forests - TechRepublic
General discussion
April 22, 2009 at 09:41 AM
dmenafro

Migration of domains in seperate forests

by dmenafro . Updated 17 years, 2 months ago

First – All help/advice is greatly appreciated!

Simple description. My company was bought out by another company. Their domain is a security nightmare, and our domain is well structured and organized. They would like to migrate their users onto our domain.

To provide the new company with access to our Exchange e-mail user accounts were created for all the users on our domain.

The setup:
Domain A – Main Domain (well managed)
Domain B – New Company Domain (Poorly managed)

The problem:
We have user accounts for each user on both domains A & B, and there’s a two way trust between the two.

We would like to have the machines of Domain B joined to Domain A, and the users logon using their Domain A accounts.

Although we would like to also like the profiles(local) to be migrated so that the user is logging in with Domain A credentials and seeing their Domain B profile settings.

We’ve started to try testing with ADMT, but we ran into issues. ADMT didn’t want to migrate a workstation without having migrated a user first, and so failed migrating a user since one existed already. We can’t remove the users
due to the fact that their accounts are tied to their exchange MB.

We currently are running scripts and data mining to find out the shares/permissions on Domain B so that we can recreate permissions on the A side so that access isn’t lost. (This is the most difficult part IMO due to the fact that the shares/permissions don’t follow any standards) ie. users have been added specifically to shares instead of a group with access, and groups have other groups as members.

If you’ve read this far I’m quite thankful! I’m going to post this and will gladly answer any questions in regards to this. Thanks again!
-Dan

This discussion is locked

All Comments