Active Directory separation project

[jtennant12]

I work for a small community college (pierpont.edu) and we are separating from our parent university (fairmontstate.edu) and I have been tasked with developing the plan to separation.

 

Currently our pierpont.edu data is store in the fairmontstate.edu Active Directory system as sub-ou's of the fairmontstate forest ( such as ou=employees,ou=Pierpont,dc=fairmontstate,dc=edu)

 

What would be the best way to migrate our employees & students AD information over to our pierpont.edu AD server? Their server is a Windows 2008R2 based system, my pierpont.edu system is Windows 2012R2 based but I could build a Windows 2008R2 AD server instead to make this transfer easier.

 

I have been testing CSVDE and have a good functioning export and import script EXCEPT for the passwords.

 

The other kink in this project is that the 2 systems are on different networks at different location. Had been looking at setting up a Forest Trust between the two systems to allow a user on either system login on a computer at either location easily.

 

My other problem is how to maintain password synchronization between the 2 seperate AD systems.

 

Any suggestions?

[psydii]

This looks like what you need:

 

http://technet.microsoft.com/en-us/library/cc974332(v=WS.10).aspx

 

"

As part of deploying the Active Directory® directory service or Active Directory Domain Services (AD DS), you might choose to restructure your environment for the following reasons:

 

To optimize the arrangement of elements within the logical Active Directory structure

 

To assist in completing a business merger, acquisition, or divestiture

"

 

On passwords. The tools linked above will migrate them. Not sure why if there is a case for maintaining both new and old ad password in sync you'd be wanting to keep them in sync beyond the initial migration?

Edited March 17, 2014 by psydii