I'm trying to fix a completely unplanned and unstructured Active Directory hierarchy. When the domain was first created on Windows Server 2000, no containers or OUs whatsoever were created for users or computers. All users were lumped up together under the default "Users" container and all the computers got lumped together in the default "Computers" container.
The domain eventually got upgraded and I have two Windows Server 2008 x64 DCs now. But of course the current structure or lack there of is a nightmare for assigning permissions and applying Group Policy so i need to restructure the whole thing.
My question is about what kind of interruption to business should I expect when moving users and computers to into OUs and Groups, if any?
Any advice on how to do this? any pointers to best practices?
Just in case it's needed, the rest of the environment is a Windows Server 2008 file server, a Windows Server 2003 R2 print server, Windows Server 2003 R2 Exchange 2003 Server and a Windows 2003 R2 x64 Server running SQL Server 2005 SP2.