Need to roll up multiple Windows networks

[rogerallen]

Here is my situation:

Corporate HQ Windows 2003 SE SP1
Branch Office #1 Windows 2003 SE SP1
Branch Office #2 Windows 2003 SE R1 SP1
Branch Office #3,4,5 Windows 2000


Each office is its one little network and AD domain. They all have different subnets and are connected via VPN in a hub and spoke. I am thinking that I want to roll this network up so that I can manage it better since I am the only IT person in the company but I am unsure as to the best approach. None of the offices have more than 15 users so having to recreate the users would not be a huge ordeal. Suggestions anyone?

Thanks in advance for any assistance.

 

[rogerallen]

I'm thinking that I can use ADMT to migrate the AD over to the final domain, then demote the domain controllers at the branch offices. Then I could promote the DCs at the remote site into the new domain. The only drawback that I can see if the VPN connection between the offices might slow down the process.

Any comments or suggestions would be greatly appreciated.

 

[pagy]

So you will be building a new domain for this or just migrating all the branch offices into the HQ domain??

Either way your idea is sound, yes you can use ADMT or re-create the users.

The only drawback that I can see if the VPN connection between the offices might slow down the process

Do you mean for the dcpromo process to add the branch office servers as DCs?? In that case you could use Install From Media;

http://support.microsoft.com/kb/311078

You will need to use AD sites and services as well to ensure clients only use their local DC for authentication;

http://www.microsoft.com/technet/pr...rectory/activedirectory/stepbystep/adsrv.mspx

Paul
MCSE


"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[rogerallen]

I would be just moving them into the HQ domain. The whole idea is to collapse the branch office domains into the HQ domain. Being an IT dept of one with branch offices that are spread out, I feel that this would ease administration as well as simplify the network.

I had thought about creating a new domain at HQ but the only real reason for me to do that would be for me to change the netbios name to something that made a little more sense but I'm not sure if it is worth the trouble just to rename the netbios name.

Thanks for the assitance.

 

[pagy]

Ok, either use ADMT to move the user accounts into your HQ domain or just create new accounts for them.

I would also use OUs to represent the branch offices in your HQ domain and follow the above links to read about sites and services and installing from media to speed up the dcpromo process at the branch offices.



Paul
MCSE


"Two things are infinite: the universe and human stupidity; and I'm not sure about the the universe."
Albert Einstein

 

[rogerallen]

Exactly what I was thinking regarding the OUs though I hadn't thought out the sites and services part yet.

I gathered that the Installing from media will only work on the 2003 servers and that I will need to upgrade the branches with 2000 servers in order for it to work in those branches. Not a big deal since I was planning on upgrading those branches anyway.