Our company has three separate Windows Server 2003 forests spanned across three states. We recently implemented an MPLS VPN Tunnel linking the two remote sites to our corporate site. My ultimate goal is to manage this network as one forest and make both remote sites a child domain of the corporate site. I know this can be easily done by removing Active Directory from both sites and then joining them to corporate domain as a child, but that would still require recreation of user accounts and having to visit all machines to readd them to the new domain. I know there has to be an alternate method. Any input would be appreciated.
I would recommend that you take a look at the Active Directory Migration Tool, which is a free download available at:
This tool will allow you to restructure or consolidate Active Directory forests as you describe, including migrating computer accounts and user account passwords. There are also third-party tools from NetIQ and Quest.
This Content Component encountered an error
Active Directory expert Laura E. Hunter offers some advice for changing the IP addresses of domain controllers.continue reading
A Windows administrator moving from Windows Server 2003 to Windows Server 2003 R2 wants to perform a restore of a previous server to a new one ...continue reading
An admin has two domains and two Active Directories. He wants to know how to join the Active Directories so that internal staff can access both, but ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.