I work for a small community college (pierpont.edu) and we are separating from our parent university (fairmontstate.edu) and I have been tasked with developing the plan to separation.
Currently our pierpont.edu data is store in the fairmontstate.edu Active Directory system as sub-ou's of the fairmontstate forest ( such as ou=employees,ou=Pierpont,dc=fairmontstate,dc=edu)
What would be the best way to migrate our employees & students AD information over to our pierpont.edu AD server? Their server is a Windows 2008R2 based system, my pierpont.edu system is Windows 2012R2 based but I could build a Windows 2008R2 AD server instead to make this transfer easier.
I have been testing CSVDE and have a good functioning export and import script EXCEPT for the passwords.
The other kink in this project is that the 2 systems are on different networks at different location. Had been looking at setting up a Forest Trust between the two systems to allow a user on either system login on a computer at either location easily.
My other problem is how to maintain password synchronization between the 2 seperate AD systems.
Any suggestions?