Case Study: Worcestershire Health and Care NHS Trust achieves secure AD domain separation with zero impact on clinicians using Quest AD migration tools

NHS Trust separates AD domains with zero impact on clinicians and patient care

Worcestershire Health and Care NHS Trust, a community trust with about 4,700 staff across community hospitals and mental health services, needed to separate from a shared Active Directory used with neighbouring acute hospitals after security audits highlighted risks. The Trust had to create its own AD domain to improve its security posture and achieve Cyber Essentials Plus accreditation — but the migration could not disrupt clinicians, patient care or daily workflows.

The Trust used Quest Migration Manager and KACE tools to create a separate AD domain while keeping passwords and user access synchronized across domains, enabling thousands of local and remote endpoints to be migrated without re-imaging or interrupting users. The project delivered a clear security boundary, passed audits to earn Cyber Essentials Plus, preserved seamless access to hospital systems for staff, and completed the migration with zero impact on clinical operations.

NHS Trust

David Brown

Chief Information Officer