We are in the process of planning our migration to ADS from 90 NT 4 domains that are used for authentication within the company into a single forest with one domain. Some of these NT domains contain upwards of 3K to 4K user accounts and untold number of groups that will need to be migrated over a period of time. A concern that we have is with the level of complexity and administrative overhead that our support organizations will experience in managing partially migrated domains, especially groups which are in some instances managed actively by the hour, over a period of time that can extend up to six or eight weeks.
Your assistance is appreciated in directing me to any best practices that address this issue or any personal experiences that you've had with this situation.
Nef
