Migrating Schema Extentions with AD Groups

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

I have a question and I hope it makes some kind of sense.

My company has our application tied into AD. We perform a schema extension and then a security group known in our application as a "role" is placed in a OU. The only way to modify a role is within our application and you can define what role has rights to do certain things in our application. Next you can define the users attached to that role either through our application or within AD by making that user a member of the security group.

I need to migrate the users, their passwords, and the groups they are assigned. I can do this with ADMTv3 but how can I migrate the schema extensions tied to those "roles" aka security groups. If I use ADMTv3 when I launch the application the roles are empty.

Unfortunately I did not write the code so I have no idea how this works with the AD Schema extension. I simply run a script in new domains to create the extension. I must migrate however because this customer has created several of their own extensions now.

I have domain X and Domain Y

Domain X=Bad
Domain Y=Fresh and New

The wrong people had control of domain X and this is why we are migrating everything to the new domain and dissolving domain X.
.