What is the best way for moving a machine from one domain to another untrusted domain.

I think migration is not an option as trust doenst exist.

Most of the machines that need to be moved VM's