Hi, I agree that a clean domain would be nice, but for a large complex organisation this may be too large a project to approach in a short time frame.
I am about to approach this myself, and I can see how easy it is going to be to build in a new domain controller, migrate the services, and destroy the rm member servers. Alongside this build new GPO and AD OU, and start to construct some meaningful policies. All well and good. However I have no idea what to do with the workstations.
In this installation we have around 2000 varied workstations, and then 300 totally unique workstations with different software on each one, the idea of just wiping these to remove rm is not my favourite path.
I have heard that you can disable RM at the workstation, by disabling a few services, uninstalling some apps, and running a script..which sounds ideal...does anyone have some more details on these services or applications, or a copy of the script that needs to be run.
I would much prefer to keep the software as is, and kill off RM (oh and I do mean kill off RM) than slash and burn the network.