Splitting out sub domains

[Guest]

All,

We currently have several domains within a forest. On of the sub domains is
using a GC in another domain. All in all it is causeing problems with
firewalls inbetween and also has a pertential security hole.

I would like to take this domain and make it a stand alone domain with no
attachment or communication with any of the other domains.

Is there a nice and simple way of doing this or is someone going to have to
be busy rebuilding the servers in this domain and creating a totaly new
domain. There are about 20 servers in this domain.

thanks in advance

 

[Paul Bergson]

If you positively will never have communication with this other domain you
could just sever the two and each use the same AD object set. We had to do
this in a company split and both companies just purged the others ad
objects, but both had to keep the same domain name. With 2003 though you
can modify the domain name. Otherwise you are going to have to build a new
domain and use a tool such as ADMT v2 to migrate across the objects needed
for the new AD.

I would recommend building a new domain and use ADMT.

http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt.asp

http://www.computerperformance.co.uk/w2k3/W2K3_ADMT.htm


--


Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA

This posting is provided "AS IS" with no warranties, and confers no rights.