'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
How to Merge Active Directory Accounts Across Domains
Question details
The user needs to consolidate user accounts located in different Active Directory domains while retaining access credentials, group memberships, and associated Microsoft 365 data.
- Product
- Microsoft Active Directory
- Device & OS
- not provided
- Scenario
- Migrating and merging user accounts during a domain consolidation or Microsoft 365 tenant migration process.
- Observed behavior
- The goal is to successfully migrate accounts, passwords, and attributes between domains without losing data or access to Microsoft services.
Before initiating an Active Directory migration, ensure you have domain administrator privileges in both the source and target domains, and verify that a trust relationship exists between them.
Migrate Accounts Using the Active Directory Migration Tool (ADMT)
Use Microsoft's official ADMT to migrate users, passwords, and group memberships between Active Directory domains.
The Active Directory Migration Tool (ADMT) is the standard utility for migrating objects between Active Directory domains in on-premises or hybrid environments.
Because cross-domain migration can be complex and may impact Microsoft 365 synchronization, it is highly recommended to plan carefully or consult a qualified migration specialist.
Download and install the Active Directory Migration Tool (ADMT) and the Password Export Server (PES) from the official Microsoft Download Center onto your migration server.
Configure a two-way trust relationship between the source Active Directory domain and the target Active Directory domain.
Open the ADMT console, right-click on 'Active Directory Migration Tool', and select the 'User Account Migration Wizard'.
Follow the wizard prompts to select your source and target domains, choose the specific user accounts you wish to merge, and specify your preferred password migration and attribute translation options.
Complete the wizard to initiate the migration. Once finished, open the Active Directory Users and Computers console in the target domain to verify the accounts were successfully merged.
Looking for a Lightweight Alternative to Microsoft Office?
While managing complex Active Directory and domain migrations requires dedicated IT tools, managing your daily documents shouldn't be complicated. WPS Office provides a seamless, free, and highly compatible alternative to Microsoft Office for your newly migrated users.
- 1. Visit the WPS website: Navigate to the official WPS Office website to download the latest free version for your operating system.
- 2. Install the application: Run the downloaded installer file and follow the straightforward on-screen instructions to set up the software.
- 3. Open and edit files: Launch WPS Office and immediately start opening, editing, and saving your existing Microsoft Office documents without formatting issues.
Frequently Asked Questions
Can I migrate passwords when merging Active Directory domains?
Yes, you can migrate passwords using the Password Export Server (PES) service in conjunction with the Active Directory Migration Tool (ADMT). This requires establishing a secure channel and exporting the encryption key from the target domain to the source domain before running the migration.
What happens to Microsoft 365 data when merging on-premises AD accounts?
If the on-premises accounts are synced to Microsoft Entra ID (formerly Azure AD), you must carefully map the source accounts to the target accounts during migration. Ensuring the ImmutableID or Source Anchor matches is crucial so that existing email, Teams history, and M365 data are preserved without creating duplicate cloud accounts.
Do I need a trust relationship between the source and target domains?
Yes, a trust relationship is an absolute requirement to perform cross-domain account migrations using native tools. Typically, a two-way forest trust or an external trust must be established before you can successfully run the Active Directory Migration Tool.
