Solved

Window 2003 SP1 AD Migration to Windows 2003 SP1 AD

Posted on 2006-10-19
5
183 Views
Last Modified: 2010-04-18
I'm sure their are simple guides for this but i was wondering how easy it is to migrate from a child domain to a parent domain in Active Directory.  We have a parent/child setup, and want to simplify the configuration as their is no need to have this type of setup.  The problem is that 99.9 percent of all users, groups, policies etc run under the child domain and was wondering firstly what version of ADMT to use (2 or 3 or other?).  I have aquired a new server which is going to be a new DC (of the parent domain) that holds the main roles, and secondly does anyone know of a straight forward guide to this type of migration?  There seems to be lots of guides for nt to ad migration etc, but nothing for this type of migration?

Many thanks as usual

Leon
0
Comment
Question by:leont
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
5 Comments
 
LVL 71

Expert Comment

by:Chris Dent
ID: 17766698

Hi Leon,

I advise you use MoveTree and not ADMT if both domains are within the same forest.

It's part of the Support Tools and should be on your Windows Server CD. Documentation for it is here:

http://support.microsoft.com/kb/238394

For user accounts they will have to be removed from any groups they are a member of prior to the move, but they can be added back in afterwards. It wouldn't be too tricky to script that kind of thing.

Chris
0
 

Author Comment

by:leont
ID: 17772293
Thanks for replying so quickly Chris.  So you would have to delete the user accounts and recreate them in the destination domain? it also says computer objects cannot be moved, so presumably they have to be re-added to the destination domain? and it also recommends recreating any policies on the destination domain.  Seems a long winded way of doing things but I sort of suspected as much.

thanks I will have a look at movetree,

Thanks again

Leon
0
 
LVL 71

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 17772344

MoveTree will happily move over user accounts, or entire OUs filled with User Accounts. It saves on migrating those; we've used it a number of times within our forest. As it preserves everything to do with the account it's quite pleasant.

Computers might benefit from ADMT (if it works) as it will rewrite the user profile and such for the new domain.

You might be able to Backup and Restore policies using Group Policy Management Console (I've never tried to restore to a seperate domain):

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

You can use ADMT to move user accounts, but because it's within the same forest you'll end up with a lot of complaints about conflicting usernames and such - very very messy.

Chris
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

by Batuhan Cetin Within the dynamic life of an IT administrator, we hold many information in our minds like user names, passwords, IDs, phone numbers, incomes, service tags, bills and the order from our wives to buy milk when coming back to home.…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Michael from AdRem Software explains how to view the most utilized and worst performing nodes in your network, by accessing the Top Charts view in NetCrunch network monitor (https://www.adremsoft.com/). Top Charts is a view in which you can set seve…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question