Hi,
Owing to a part sale of the company I have a requirement to separate the existing forest.
Current environment:
UK - 2 x Root DCs, Child DCs for UK Domain, Member Servers
Ireland - Child DCs for IE Domain, Member Servers (~400)
The business want to sever the network links by Xmas and Ireland have told me that they cannot migrate the 400 member servers by then so they will need to remain in the existing IE domain.
My thoughts are to stand up 2 x new Root DCs in Ireland and 1 x new IE Child DC in the UK. I'm hoping this will allow two things once the links are severed:
Ireland's member servers to continue functioning as member servers (as they'll have Root DCs over there) allowing them to then migrate them into their new forest.
Cleanly demote down the IE domain in the UK as I will have stood up a DC as discussed above.
Does this sound feasible ? Are there any better options ?
My other concern is that Ireland will then have a copy of our AD database after the links are severed, which will probably raise alarm bells with our Fraud & Security department. Should I be worried ?
Thanks in advance,
Jamie
