The final stage of any carve-out project, where a corporate segment of a large parent company ("Parent") is being separated to become its own independent organization ("NewCo"), involves the complete migration of all IT resources and services. Basic services such as Active Directory authentication and Exchange email, which were historically handled by the Parent IT department, must be gracefully transitioned to the NewCo's datacenter without causing any major disruptions. This process inevitably involves accessing and making changes to the Parent's server infrastructure and this oftentimes poses problems. The nature of carve-out projects is such that once the deal is finalized, the once-helpful Parent IT staff may not prioritize the carve-out project needs above other projects and may be resistant to provide access to their environment. They essentially become a foreign organization.
Whereas many cross-forest migration guides exist online, many require Domain Admin or other administrative rights in the source domain and very little is written about what to do when your source domain admins simply won't provide the permissions you require. This series of posts aims to address those unique problems faced during a carve-out migration.
This series is derived from West Monroe's experience with several large-scale carve-out projects involving organizations of hundreds or thousands of employees being separated from their corporate parent. Once the new target domain is created and its supporting infrastructure built-out, the five stage migration process is started. Active Directory and Exchange are always the two major IT services that need to be transitioned. Their respective objects to be migrated are as follows:
Although there are many different migration tools, West Monroe has most recently been using the following combination of products:
This combination of tools, used in the correct sequence and with the proper preparations, allows for the migration of all Active Directory and Exchange services while minimizing any disruptions to the business. The high-level migration process by which West Monroe uses these tools is as follows:
In part 2 of this guide, I will be discussing the steps required to establish and maintain Exchange mail-flow coexistence between the Parent and NewCo organizations.