I'm still working through it now. Howard, thanks for the guidance here. Realising that you can't exactly give away employer IP.

If I've migrated the user over to the new domain with SID history, then effectively for permissions things shouldn't have to change.

Any hints on other SID locations?

TIA