Migrate Users + Profiles to a new AD Domain

Dug this out of an old email... Going to be doing one of these again:

Tested, freaking took a while to work it out, but after some phone calls, and newsgroup surfing, got it. J
Not sure if all the steps are needed, however this combo worked for me.

Moving a PC (computer object) from one domain (win2k) to another domain (win2k3). I wanted to preserve the profile settings once the computer is a member of the new domain:

• Setup trust between the 2 domains.
• Set the new DC WINs setting to point to the old WINs server
• Load ADMT 3 on the target domain controller
• Setup administrator password to be the same on both domains, as well as the local administrator account on the machine (use Cusrmgr.exe to change admin password on multiple machines http://support.microsoft.com/kb/272530/EN-US/ )
• Add the Domain Admin global group from the source domain to the Administrators Local Group in the Target domain
• Add the Domains Admin global group from the target domain to the Adminstrators Local Group in the source domain
• Create Secondry DNS zone of the other domain on each DNS server (win2k3 – click some settings to allow replication to any server – its locked down by default)
• Set Windows firewall to be turned off on the computers (use GP to turn that f**ker off!)
• *important* Set all client machines to be migrated have their DNS server pointing to the new Win2k3 DC DNS (I set statically, but do this via DHCP when implementing)
• On the target Domain Controller, create an new MMC console, add the ADMT plug in and save to desktop
• Right click on that icon, and run as the administrator account from the other domain

Once the machine reboots, you can log into the other domain with the same account (assuming you used ADMT to migrate user accounts as well!), and viola, the profile should be exactly the same as when logging into the old domain!