Intraforest users & computers etc.

[commander data]

Hello,

Here is our situation:

We currently have 1 Forest with 1 Domain. The forest is a Windows 2000 with
a Windows 2000 native domain.
Now we want to add another tree root (not a child domain!) that is a Windows
2008 domain. Eventually all the users & computers will migrate to this new
domain.
It's unclear to me what will happen to the first domain that was created in
this Forest. Can this domain be demoted and deleted after all the objects
have migrated to the new W2K8 domain? I have read in some articles that a
first root domain in the forest cannot be deleted?

I want to make sure I make the right decision before I continue. I know I
can setup a Interforest but this has some limitations with migrating users
and their SIDS when using the ADMT 3.1

So my goal is that a new tree root will act as the W2K8 domain with W2K8
Domain Functional Level. After deleting the old W2K domain when everything is
migrated I want to make the Forest a W2K8 Forest as well


Can this be done?

 

[Meinolf Weber [MVP-DS]]

Hello commander,

Why not creating a new forest and migrate to it? There is no need for an
empty root forest if you think about that.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[commander data]

Meinolf,

I have thought about that, but there are limitations/certain restrictions
when it comes to user migration. The SIDhistory wil not work with
Interforests.
I realy would like to know if my question is the most suitable, and more
important can it be done? I don't like ending up with 2 domains.

 

[commander data]

can anyone give me an answer?

Meinolf,

I have thought about that, but there are limitations/certain restrictions
when it comes to user migration. The SIDhistory wil not work with
Interforests.
I realy would like to know if my question is the most suitable, and more
important can it be done? I don't like ending up with 2 domains.

 

[Meinolf Weber [MVP-DS]]

Hello commander,

Where do hyou read that SIDhistory will not work? ADMT guide 3.1 states at
page 10:

Migration consideration
Security identifier (SID) history maintenance

Interforest restructure >>> Maintaining SID history is optional

Intraforest restructure >>> SID history is required.


Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

 

[commander data]

Hello meinolf,

I have read a lot of articles and it could be I have mixed some things up.
Nevertheless... I still would like an answer.

thank you

 

[Dhruv raj]

here is the answer
1.create new forest
2.migrate users while maintainig the SID histroy
follow this link for step 2
http://technet.microsoft.com/en-us/library/cc736615.aspx


Dhruva Raj

 

[commander data]

Hello raj,

I created a new Forest.
But it seems that that new forest is completely isolated. It's on the same
network as our W2K Forest. I started a new thread that suited my question
better because now I've created a new Forest. The thread is: "2 Forest in one
network. Not able to connect domain"

I hope you can give me a response there. thank you!

 

[commander data]

Thank you for the quick response Meinolf
I have looked at a trust between the W2K Forest and the W2K8 Forest
But there is no Trust Forestrelationship possible because it's a W2K Forest

How should I proceed? Do I have to creat an external trust between them?

And if there is a trust, than I can join a computer to this new domain?

I have ran adprep /forestprep on the W2K Forest (updated to 44)
Should I also run the domainprep? We are not planning to install W2K8 DC in
the W2K Forest

Thank you in advanced!