单组织跟Active Directory集成，调整为多组织跟AD域控各分支分开集成疑问解答

Not quite following but let me paraphrase. You have changing coming to your AD system that might impact where users are located, essentially a reshuffling inside of AD. I am not sure its necessary to update AD at all since we just need to react to those changes. Not seeing a question here. The path that Windchill captures in the database needs to match or you will have a disconnected user which can be repaired but takes time. Assuming in the new configuration, your starting point still includes the possibility to find all users, they should still be able to login. If you are seeing a split to multiple domain controllers, that each have a portion of your users, then it would follow that you would have to add those connections to the other controllers to check there if the first one was not able to find the user. 

This is one of the main reasons early on we opted to authenticate to AD but used the WindchillLDAP to manage Windchill users. The local LDAP was static and under the control of Windchill admins.  They can shuffle AD all they want since we only needed to match the userID to complete the log in process. 

So it depends on if you are assigning an org automatically, and how you choose to do that.

This article describes how to assign users automatically to an org  using an ldap attribute or based on a specific adapter:

https://www.ptc.com/en/support/article/CS133561

Some considerations on multiple adapters:

• You can't have two adapters that map to the same part of AD to do different things, the search base MUST be unique (Which sounds like what you could accomplish with your orgs/divisions set by distinct OU's).
• Multiple adapters gives you a little more granularity on control, you can set different properties based on the org if needed.
• If it is a large globally dispersed architecture, and you want to point users of a certain org to a local domain controller instead of a global one, you can assign users of an org to their own DC.
• If you don't have an attribute on the users in AD that would define what WC ORG they need to be assigned to, you would need to manually assign users to an org, or have distinct adapters and let the adapter assign the org.