We're going through an AD upgrade ourselves. We're planning on making the existing NT 4 domain a child of the new AD domain to avoid this very issue.