In a few months' time I have to move our SDP server into a new Active Directory domain.  This is part of a project to merge 3 existing Active Directories into a new one.

 

The existing domains already exist in SDP, as there are trusts in place, and users can login from all domains.  Users will be moved into the new AD domain using a phased approach (department at a time) and a new naming convention will be adopted for user names, so we will be migrating SID histories.  At some point in the near future the old domains will cease to exist.  I anticipate moving the SDP server into the new domain once all the users have been migrated.

 

So, I have a few questions...

 

1. Are there best practices to follow when moving SDP into a new domain?  Is there a recommended way of doing this?

 

2. How easy is it to move the SDP server into the new domain? What needs to be done exactly and what do I need to be aware of?

 

3. When a user is moved from domaina to domainb will they still be able to access their reqeusts when they have a new user name?  Will the SID history be enough to acheive this?  If not is there a way to update each user in SDP so that they just have a new AD domain and user, but everything else remains?

 

4. Should I migrate the SDP server after the users or before?  Or doesn't it matter?

 

Thanks in advance to anyone that responds with advice.  I hope I've included enough information but if not just ask.