Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

We have a somewhat screwed-up AD domain structure. At some point in the past, Domain A was the parent to Domain B. We have two locations, so I believe previous IT staff set up the remote location as a child of our existing domain. At some point before I worked here, there was a serious problem with network and whatever consultant was brought in to fix things wound up changing things around so that Domain B is now the parent of Domain A. I really don't know more detail than that, but this is what I've been told.

At a later point, but also before I worked here, the IT admin at the time created a new domain in a new forest, thinking that we needed to start fresh. The problem was that there were, in his words, screwed-up permissions due to the parent/child switcheroo. (A big part of our problem is that, although we do pretty well managing the network, neither he nor I is an AD expert.)

A big piece of this migration, which has been going on for quite a while now, is moving Exchange into the new domain. This would involve cross-forest migration of all mailboxes (~180 users), and is not for the faint of heart, from what I understand. Particularly since downtime is absolutely not an option.

A consultant that we hired to help with the Exchange migration got seemingly nowhere after 6 months, so we found someone else, who seems a lot more qualified. This new consultant says that, although we can migrate to a new forest, it's a much bigger deal, more expensive, and will take more time. His suggestion is to do a domain rename instead.

As we evaluate our options, I'm looking for advice from other experts out there. Does what this new guy says sound reasonable? Is it wiser for us to consider a (supposedly less expensive and easier) domain renaming process of our two current "old" domains rather than migrating everything to our new domain in a forest? Thanks in advance.

share|improve this question
    
I feel for you. You're in a bad situation. Be sure to cross all your Ts and dot all your Is so you don't get burned. –  Chris S Aug 17 '10 at 20:54
2  
Shameless business solicitation: That $30K price you were quoted (per your comments below) sounds outrageous (unless I'm missing understanding some mitigating circumstances). You don't mention where in the world you are in your profile, but I'd certainly be interested in giving you an opinion "on spec" if you're interested in discussing it further. My Server Fault profile has a link to my company's web site w/ telephone and email contact information. –  Evan Anderson Aug 17 '10 at 21:35

2 Answers 2

up vote 7 down vote accepted

I'm really concerned with how the previous consultant switched the forest root and a subdomain's roles. That really shouldn't be possible, and I've got a funny feeling they pulled some "unsupported" black magic.

If that's the case, I'd opt for migrating to a new forest/domain(s) and scrap the existing; as $DEITY only knows what else is lurking in that schema. It involves more work; but it's not that much more and 180 mailboxes doesn't sound like a lot (without knowing how large they are).

share|improve this answer
3  
Agreed, as soon as I read "Domain B is now the parent of Domain A" I felt just BAD. –  Massimo Aug 17 '10 at 19:46
1  
If you start over and build it right, you'll pay for it once. With the rename, you STILL might end up having to pay for the other option, if things don't go well. Sounds like you've already paid for this once with no good result - I'd opt for a healthy AD. –  Kara Marfia Aug 17 '10 at 19:54
1  
our MS field tech said that if we ever felt the need to rename our domain, we were to call him so that he could talk us out of doing it. –  johnh Aug 17 '10 at 20:41
1  
There are too many unanswered questions here for me to feel comfortable making any recommendation. If there was "unsupported black magic" occurring in the past then I'd be leery of moving forward with that database. Having said that, my gut says that the "parent / child switch" probably amounted to a move of objects from one domain to the other (possibly poorly executed). Domain rename is perfectly feasible if you approach it methodically and proceed carefully. If you're unsure it's going to work, mock it up in a lab of VMs first. –  Evan Anderson Aug 17 '10 at 21:12
1  
What's the cost / benefit of investigating the "cheaper solution" versus just spending the money on the more expensive solution? If you can get somebody to spend 10 hours at, say, $200.00 / hr mocking it up and testing it, and you end up "saving" $20K in additional costs because the domain rename scenario works out then it's a net win. (In the end, I tend to think that this is probably a fairly straightfoward scenario surrounded in the "fog" of lack of information because time has passed since the various "consultants" did their (presumably vaguely documented) work. –  Evan Anderson Aug 17 '10 at 21:14

Which version of Exchange? If anything later than 2003, renaming the domain(s) is definitely not supported.

Also, why exactly would you want to rename it/them? I don't think that would only be a cosmetic change, so what do you want to accomplish exactly? Switch the two domains back again (the horror, the horror)?

I strongly suggest starting with a fresh domain, too. Your situation looks WAY too much compromised to be stable in the long term.

share|improve this answer
    
Also, moving live mailboxes around is child's play with Exchange 07+, that definitely shouldn't influence anything. –  Kara Marfia Aug 17 '10 at 19:55
    
We are using Exchange 2003. The idea behind renaming is to get us back to one single domain. So we'd move stuff from the child to the parent (or vice-versa? I'm not sure) and then rename it as one domain. @Kara: Should we consider upgrading to Exchange 2007 first, in order to make the migration easier? We were thinking that we should wait until we have our domain structure sorted out before we do that. –  johnnyb10 Aug 17 '10 at 20:11
    
Ouch, yes, I'd opt for getting exchange on an already-healthy AD, too. I was hoping you were on 07 already. Not sure you're going to be able to avoid some form of downtime with 03 - that may be why the consultant is favoring the rename? @Evan Anderson - good to know this is a terrible idea, I knew you'd show up and clear this up! –  Kara Marfia Aug 17 '10 at 20:21
1  
@Kara Marfia: DNS domain rename isn't supported in an Exchange 2007 or 2010 environment. If the poster upgrades his Exchange infrastructure he'll be shut-out of any future domain rename possibilities. See: technet.microsoft.com/en-us/library/cc816848(WS.10).aspx –  Evan Anderson Aug 17 '10 at 21:17
    
Thanks again for the help everyone. I have some more info. We had a call with the consultant again and, based on more poking around on his end--including the realization that we've already moved our workstations over to the new domain--he said that the rename is probably not a good option at this point. He said our best bet might be to move to the new domain after all, but he suggested we upgrade to Exchange 2007 first, as that will make it easier. Do others agree that this will help? If so, can you briefly explain why? I guess the plan would be that, after doing that, we'd use the ADMT. –  johnnyb10 Aug 20 '10 at 12:38

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.