Ive got a domain that was originally an NT4 domain with a PDC and BDC. We upgraded years ago to Win2k domain controllers and Active Directory. Since then we have run in "mixed" mode, and done everything pretty much like we did in NT4. We have a few OUs and some group policies for basic desktop configuration and stuff but nothing complicated. Now we've got new hardware to replace the old PDC and BDC and I want to move to win2003, so Ive been researching the best way to do that. Meanwhile they have decreed that we are changing our user naming convention, so all our users have to be renamed as well. What Im thinking now is to create a new 2003 forest, re-create all the users in the new forest (700+ users but I can batch create them), use trust relationships to let them access resources that are still on the old "domain". Is there a better way to accomplish this? I'm just in the research stage right now, so if anybody can steer me in the right direction or has any suggestions/comments, I would appreciate any help.