We're looking at doing a cloud migration and considering shifting to a new Active Directory forest in the process.
On-site, our AD root forest matches our top-level domain (myschool.edu). We've been using it for several years, but it could have been managed better. There are plenty of objects and groups that we're not sure are being used any more (many of which were inherited), and while it isn't directly impacting performance, it's a problem we'd like to resolve.
Ideally, though, we'd like our AD root forest to be a sub-domain of our top-level domain (ad.myschool.edu). Since this could potentially involve a big change, I thought it might be easier to just start that as a new root forest in the cloud. If we can just synchronize the users (and maybe some groups) from the old AD forest to the new one, we could just make switching the domain the machine is bound to part of the cloud migration process. This way, there's no single day a bunch of things break... we just move closer to the day that we get rid of the old forest (at myschool.edu).
I may be thinking about this wrong, though. What would be the best way of going about doing this? If it helps, we're not using an Exchange server.