There is a global Windows 2000 active directory forest with three primary domains Europe, Americas, & Asia Pacific as well as an empty forest root.
There is a single global exchange 2003 organization with three administrative groups, I’ll let you guess how they are arranged.
The European market is in the process of migrating from HP Openmail to Exchange.
The Americas market has always been using exchange.
There is an expatriate program where business persons can travel abroad and hold positions for a period of years in which they will eventually return home. A great deal of these expatriates are high ranking company officials who have been with the company for a number of years and therefore have their sid associated with ACLs all over the place.
When an expatriate travels from Europe to the Americas, their account has historically been maintained in both domains until their return to Europe. This has introduced a number of issues with the exchange migration leading the Europeans to issue a mandate that all 1500 of these expatriates choose the account that they want to keep within the next two weeks. This solution does not provide adequate customer service according to management.
My question is two fold:
- does anyone know of an easy way to consolidate accounts and mailboxes into a single account and mailbox with an automated process that will preserve the permissions to files, directories, etc. and still allow for the user’s
- Openmail to be migrated into that single remaining mailbox?
- once the migration is completed, how is the move from one domain to another maintained as users begin new assignments and complete old ones so that their account is easily moved to the alternate domain with no loss of permissions?
If anyone has any good solutions I would be happy to hear them, a quick solution is needed to allow for the migration to continue.
