Restructure Domain Plan:

Our organization consists of a single domain running in Windows 2000
mixed mode. The sole DC is running Windows 2000 and has Exchange 5.5
located on it. This DC is also our main file server. (I didn't set
any of this up). We also have an NT4 member server in this domain
that is runing Citrix 1.8 to which over 200 of our external clients
connect to on a daily basis. The external clients do not use
Exchange, only internal users (35 users) utilize exchange. Both
internal and external users access files on the file server.

For our internal users, we need to move them to a new domain while
migrating to Windows 2003 and Exchange 2003. We also need to move the
files from the Windows 2000 server to the new domain, ensuring that
the external clients still in the old domain will have access to them.

So at the end of the restructure, we hope to have two domains:
OLDDOMAINNAME still running on Windows 2000 DC without Exchange and
without serving files. Only External Clients will be users in
OLDDOMAINNAME, all internal users and groups will have been moved to
newdomain.private. NT4 member server with Citrix still in
OLDDOMAINNAME. New domain, newdomain.private, will have one windows
2003 DC (dc1.newdomain.private) that is running exchange 2003 and is
main file server.

Will the following plan work?

Create a new forest on a new windows 2003 domain controller
(dc1.newdomain.private)
Establish 2-way external trust between OLDDOMAINNAME and
newdomain.private
Use ADMT to migrate internal users to newdomain.private
Use ADMT to migrate internal groups to newdomain.private
Use ADMT to migrate internal computers to newdomain.private DO NOT
MIGRATE Citrix box running NT4.
Use FSMT to migrate files from old Windows 2000 server to
dc1.newdomain.private
Install Exchange 2003 on dc1.newdomain.private
Use Exchange Migration Wizard or ExMerge to move mailboxes (35 users)
to dc1.newdomain.private

How do I make sure that the Citrix box will authenticate users from
the OLDDOMAINNAME but still have access to files on the file server
(dc1.newdomain.private)? Will the trust cover this?

Any suggestions or easier ways to do this would be appreciated!

--
Christopher Hurley



.

Relevant Pages