breaking up a w2k domain

  • Thread starter Thread starter Jimmy Andersson [MVP]
  • Start date Start date
J

Jimmy Andersson [MVP]

Is creating a new forest and migrate the affected resources/users that are
beeing sold into it out of the question?
Since it's beeing sold you might need to change domain name, which is
possible in Windows Server 2003 but not Windows 2000 Server.
Another way would be to upgrade the existing NT domain to 2000 or 2003 and
then migrate the affected users with ADMTv2.

Regards,
/Jimmy
 
we are about to sell off part of our company (the part being sold off
is siteb and does not contain the first server in AD) and need some
advice on how to move/split AD (currently in native mode). the two
physical sites are not actually sites in AD and everyone logs on as
firstname.surname in company.com
The two sites are linked together using a vpn with domain controllers
in both physical sites. Both physical sites have an exchange server
hosting the company.com domain with mailboxes split so each user has
their mailbox on their local server.

If the vpn link is cut, whats the best way for the domain controllers
(in each site) to carry on running and not bother trying to contact
the DC's on the other site? The location that is being sold off will
be joining an existing nt4 domain (in the near future) that will be
subsequently upgraded to w2k3 network.

Any gotchas that I need to be aware of? I know the siteb servers will
try to contact sitea servers but I don't think this will cause a
problem (apart from errors in the event log)? Eventually I guess the
data will be moved onto the nt4 servers and then each desktop will
need to be reconfigured to log onto the new nt4 domain.
 
Hi

Thank you for posting!

I think that the best way is migrating the users and domain information to
a new domain of the existing nt4 domain. If you would like to divide the
current domain, you may need to reset GC and FSMO roles on one part and
cleanup the metadata. Also, the Exchange server is hard to divided. You may
need to move the mailbox to the right Exchange server and reconfigure the
public folder and system folder.

For more information on the migration method, please refer to the following
article.

326480 How to Use Active Directory Migration Tool Version 2 to Migrate from
http://support.microsoft.com/?id=326480

Hope this helps!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: (e-mail address removed) (Andy Helsby)
| Newsgroups: microsoft.public.win2000.active_directory
| Subject: breaking up a w2k domain
| Date: 24 Mar 2004 05:43:37 -0800
| Organization: http://groups.google.com
| Lines: 21
| Message-ID: <[email protected]>
| NNTP-Posting-Host: 193.195.87.146
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1080135818 3124 127.0.0.1 (24 Mar 2004
13:43:38 GMT)
| X-Complaints-To: (e-mail address removed)
| NNTP-Posting-Date: Wed, 24 Mar 2004 13:43:38 +0000 (UTC)
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
e.de!news.glorb.com!postnews2.google.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:70856
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| we are about to sell off part of our company (the part being sold off
| is siteb and does not contain the first server in AD) and need some
| advice on how to move/split AD (currently in native mode). the two
| physical sites are not actually sites in AD and everyone logs on as
| firstname.surname in company.com
| The two sites are linked together using a vpn with domain controllers
| in both physical sites. Both physical sites have an exchange server
| hosting the company.com domain with mailboxes split so each user has
| their mailbox on their local server.
|
| If the vpn link is cut, whats the best way for the domain controllers
| (in each site) to carry on running and not bother trying to contact
| the DC's on the other site? The location that is being sold off will
| be joining an existing nt4 domain (in the near future) that will be
| subsequently upgraded to w2k3 network.
|
| Any gotchas that I need to be aware of? I know the siteb servers will
| try to contact sitea servers but I don't think this will cause a
| problem (apart from errors in the event log)? Eventually I guess the
| data will be moved onto the nt4 servers and then each desktop will
| need to be reconfigured to log onto the new nt4 domain.
|
 
How is it going now? If you need further assistance, feel free to let me
know. Have a nice day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| X-Tomcat-ID: 375608397
| References: <[email protected]>
| MIME-Version: 1.0
| Content-Type: text/plain
| Content-Transfer-Encoding: 7bit
| From: (e-mail address removed) (Jack Wang [MSFT])
| Organization: Microsoft
| Date: Thu, 25 Mar 2004 13:46:13 GMT
| Subject: RE: breaking up a w2k domain
| X-Tomcat-NG: microsoft.public.win2000.active_directory
| Message-ID: <3IjnM#[email protected]>
| Newsgroups: microsoft.public.win2000.active_directory
| Lines: 83
| Path: cpmsftngxa06.phx.gbl
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:71033
| NNTP-Posting-Host: TOMCATIMPORT1 10.201.218.122
|
| Hi
|
| Thank you for posting!
|
| I think that the best way is migrating the users and domain information
to
| a new domain of the existing nt4 domain. If you would like to divide the
| current domain, you may need to reset GC and FSMO roles on one part and
| cleanup the metadata. Also, the Exchange server is hard to divided. You
may
| need to move the mailbox to the right Exchange server and reconfigure the
| public folder and system folder.
|
| For more information on the migration method, please refer to the
following
| article.
|
| 326480 How to Use Active Directory Migration Tool Version 2 to Migrate
from
| http://support.microsoft.com/?id=326480
|
| Hope this helps!
|
| Sincerely,
| Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
| Microsoft Partner Support
|
| Get Secure! - www.microsoft.com/security
|
| =====================================================
| When responding to posts, please "Reply to Group" via
| your newsreader so that others may learn and benefit
| from your issue.
| =====================================================
|
| This posting is provided "AS IS" with no warranties, and confers no
rights.
| --------------------
| | From: (e-mail address removed) (Andy Helsby)
| | Newsgroups: microsoft.public.win2000.active_directory
| | Subject: breaking up a w2k domain
| | Date: 24 Mar 2004 05:43:37 -0800
| | Organization: http://groups.google.com
| | Lines: 21
| | Message-ID: <[email protected]>
| | NNTP-Posting-Host: 193.195.87.146
| | Content-Type: text/plain; charset=ISO-8859-1
| | Content-Transfer-Encoding: 8bit
| | X-Trace: posting.google.com 1080135818 3124 127.0.0.1 (24 Mar 2004
| 13:43:38 GMT)
| | X-Complaints-To: (e-mail address removed)
| | NNTP-Posting-Date: Wed, 24 Mar 2004 13:43:38 +0000 (UTC)
| | Path:
|
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
| e.de!news.glorb.com!postnews2.google.com!not-for-mail
| | Xref: cpmsftngxa06.phx.gbl
microsoft.public.win2000.active_directory:70856
| | X-Tomcat-NG: microsoft.public.win2000.active_directory
| |
| | we are about to sell off part of our company (the part being sold off
| | is siteb and does not contain the first server in AD) and need some
| | advice on how to move/split AD (currently in native mode). the two
| | physical sites are not actually sites in AD and everyone logs on as
| | firstname.surname in company.com
| | The two sites are linked together using a vpn with domain controllers
| | in both physical sites. Both physical sites have an exchange server
| | hosting the company.com domain with mailboxes split so each user has
| | their mailbox on their local server.
| |
| | If the vpn link is cut, whats the best way for the domain controllers
| | (in each site) to carry on running and not bother trying to contact
| | the DC's on the other site? The location that is being sold off will
| | be joining an existing nt4 domain (in the near future) that will be
| | subsequently upgraded to w2k3 network.
| |
| | Any gotchas that I need to be aware of? I know the siteb servers will
| | try to contact sitea servers but I don't think this will cause a
| | problem (apart from errors in the event log)? Eventually I guess the
| | data will be moved onto the nt4 servers and then each desktop will
| | need to be reconfigured to log onto the new nt4 domain.
| |
|
|
 
If you would like to divide the
current domain, you may need to reset GC and FSMO roles on one part and
cleanup the metadata. Also, the Exchange server is hard to divided. You may
need to move the mailbox to the right Exchange server and reconfigure the
public folder and system folder.

For more information on the migration method, please refer to the following
article.

326480 How to Use Active Directory Migration Tool Version 2 to Migrate from
http://support.microsoft.com/?id=326480

Hope this helps!

Thanks - we moved various users to the other server which has worked
and we've broken the vpn link. Now I need to size the roles as you
suggested and reconfigure the mail!

Thanks again,

Andy
 
Thank you for posting back, Andy! If you have any
questions in the future, please don't hesitate to post in the newsgroup.
Have a great day!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: (e-mail address removed) (Andy Helsby)
| Newsgroups: microsoft.public.win2000.active_directory
| Subject: Re: breaking up a w2k domain
| Date: 1 Apr 2004 01:02:19 -0800
| Organization: http://groups.google.com
| Lines: 22
| Message-ID: <[email protected]>
| References: <[email protected]>
<3IjnM#[email protected]>
| NNTP-Posting-Host: 193.195.87.146
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1080810139 18944 127.0.0.1 (1 Apr 2004
09:02:19 GMT)
| X-Complaints-To: (e-mail address removed)
| NNTP-Posting-Date: Thu, 1 Apr 2004 09:02:19 +0000 (UTC)
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
e.de!news.glorb.com!postnews1.google.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:71888
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| (e-mail address removed) (Jack Wang [MSFT]) wrote in message
| > If you would like to divide the
| > current domain, you may need to reset GC and FSMO roles on one part and
| > cleanup the metadata. Also, the Exchange server is hard to divided. You
may
| > need to move the mailbox to the right Exchange server and reconfigure
the
| > public folder and system folder.
| >
| > For more information on the migration method, please refer to the
following
| > article.
| >
| > 326480 How to Use Active Directory Migration Tool Version 2 to Migrate
from
| > http://support.microsoft.com/?id=326480
| >
| > Hope this helps!
|
| Thanks - we moved various users to the other server which has worked
| and we've broken the vpn link. Now I need to size the roles as you
| suggested and reconfigure the mail!
|
| Thanks again,
|
| Andy
|
 
| Thanks - we moved various users to the other server which has worked
| and we've broken the vpn link. Now I need to size the roles as you
| suggested and reconfigure the mail!
AD seems to be clear but RUS is not updating the address's on the
server and email to other users on external sites (with the same
domain name) is not getting forwarded, but i suspect that needs to be
asked on the exchange news groups!
 
You are right, Andy! Please feel free to post it in the Exchange newsgroup!
Have a great weekend!

Sincerely,
Jack Wang, MCSE 2000, MCSA, MCDBA, MCSD
Microsoft Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: (e-mail address removed) (Andy Helsby)
| Newsgroups: microsoft.public.win2000.active_directory
| Subject: Re: breaking up a w2k domain
| Date: 1 Apr 2004 09:44:24 -0800
| Organization: http://groups.google.com
| Lines: 7
| Message-ID: <[email protected]>
| References: <[email protected]>
<3IjnM#[email protected]>
<[email protected]>
<[email protected]>
| NNTP-Posting-Host: 81.86.172.239
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1080841464 22183 127.0.0.1 (1 Apr 2004
17:44:24 GMT)
| X-Complaints-To: (e-mail address removed)
| NNTP-Posting-Date: Thu, 1 Apr 2004 17:44:24 +0000 (UTC)
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.sul.t-online.de!t-onlin
e.de!news.glorb.com!postnews1.google.com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.win2000.active_directory:71954
| X-Tomcat-NG: microsoft.public.win2000.active_directory
|
| > | Thanks - we moved various users to the other server which has worked
| > | and we've broken the vpn link. Now I need to size the roles as you
| > | suggested and reconfigure the mail!
| AD seems to be clear but RUS is not updating the address's on the
| server and email to other users on external sites (with the same
| domain name) is not getting forwarded, but i suspect that needs to be
| asked on the exchange news groups!
|
 
Back
Top