Dave- Since this is probably more of an AD issue than a Group Policy issue (which this list is focused on) I might suggest you post this on the activedir.org mailing list as well, as you are likely to get some responses from folks who have done a lot of this kind of migration. However, I think the bottom-line is the answer will be driven by the OU administrators' business needs. If they need to be able to create users and computers, create and link GPOs, create groups, etc. then you will likely have to make those OUs wide-open for them. But again, it depends upon what responsibilities they have, keeping in mind that access to domain controllers directly will be pretty limited for them. Darren From: gptalk-bounce@xxxxxxxxxxxxx [mailto:gptalk-bounce@xxxxxxxxxxxxx] On Behalf Of Daniel Gomes Sent: Tuesday, January 08, 2008 1:38 PM To: gptalk@xxxxxxxxxxxxx Subject: [gptalk] AD Consolidation Hello all, We are at the beginning stages of doing an AD Consolidation. We are looking at consolidating two domains into one having one of the domains become an OU in the other. My question is if anyone has done this before what would you recommend as the best way about assigning rights to the OU of the domain to allow its old administrators to still manage the OU and its Sub OUs? Dave