General discussion


Migrating to a new domain

By Tink56 ·
We have a Windows 2000 Active Directory network. The domain controller is old. Another individual who was involved in the network at the very beginning had weird settings in DNS and who knows what else. I'm still battling weird things that happen from time to time. Also, I'd like to change the domain name from to something.local. I am purchasing a replacement server and want to migrate to Windows Server 2003.

An associate advised me that the following method would ensure a smooth transition.

1. Acquire the new server and set it up as something.local. Set up active directory. Create a trust relationship between the two domains.

2. Create user accounts and computer accounts in active directory on the new machine/domain. Migrate everyone to the new domain (essentially their log on to their PC will now be user@something.local instead of Because there is a trust relationship, everyone should be able to access their "stuff" on the other servers.

3. Migrate the printers to the new domain.

4. Migrate the other servers to the new domain.

5. All that is left should be the old domain on the old domain controller. It's hard drive can be wiped away and the machine used for something else.

So. It all sounds easy. Too easy.

Anyone ever done this before? Any advice or warnings you can give me?

This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Comments

Collapse -

by CG IT In reply to Migrating to a new domain

sounds like a lot of work.

I'd use the ADMT

Exmerge if you have Exchange running on the old domain.

Collapse -

by The Ice Man In reply to Migrating to a new domain

Since your adding a Windows 2003 server to a Windows 2000 domain you need to make sure to prep the old domain to accept the new server.

This link should help.

Collapse -

by curlergirl In reply to Migrating to a new domain

Looks like you've gotten very sound advice from your friend. Instead of creating new user accounts on the new domain, you could just use the ADMT (Active Directory Migration Tool - it's on the Windows 2003 CD) to migrate user accounts to the new domain. This also lets you migrate all your security and distribution groups at the same time.

The only thing I would be a little concerned about is that you need to have a stable DNS server in each domain in order for the trust relationships to work. If your DNS server on the old domain is hinky, you might have some problems. Do you have another server on the old domain that you could temporarily configure as a DNS server instead?

One additional thing you need to keep in mind is IP subnetting. Depending on the size of your network and how your subnetting is currently configured, you might be able to simply put both domains in the same IP subnet. However, if not, you will need to set up some sort of routing between the two domains and their IP networks so that they can talk to each other. This would most easily be done with a separate router - I don't know how familiar you are with this area, so if you need additional help or advice on this, either email me directly or post again here and I or someone else can help you out.

Hope this helps!

Related Discussions

Related Forums