Solved

Window 2003 SP1 AD Migration to Windows 2003 SP1 AD

Posted on 2006-10-19
5
178 Views
Last Modified: 2010-04-18
I'm sure their are simple guides for this but i was wondering how easy it is to migrate from a child domain to a parent domain in Active Directory.  We have a parent/child setup, and want to simplify the configuration as their is no need to have this type of setup.  The problem is that 99.9 percent of all users, groups, policies etc run under the child domain and was wondering firstly what version of ADMT to use (2 or 3 or other?).  I have aquired a new server which is going to be a new DC (of the parent domain) that holds the main roles, and secondly does anyone know of a straight forward guide to this type of migration?  There seems to be lots of guides for nt to ad migration etc, but nothing for this type of migration?

Many thanks as usual

Leon
0
Comment
Question by:leont
  • 2
5 Comments
 
LVL 70

Expert Comment

by:Chris Dent
Comment Utility

Hi Leon,

I advise you use MoveTree and not ADMT if both domains are within the same forest.

It's part of the Support Tools and should be on your Windows Server CD. Documentation for it is here:

http://support.microsoft.com/kb/238394

For user accounts they will have to be removed from any groups they are a member of prior to the move, but they can be added back in afterwards. It wouldn't be too tricky to script that kind of thing.

Chris
0
 

Author Comment

by:leont
Comment Utility
Thanks for replying so quickly Chris.  So you would have to delete the user accounts and recreate them in the destination domain? it also says computer objects cannot be moved, so presumably they have to be re-added to the destination domain? and it also recommends recreating any policies on the destination domain.  Seems a long winded way of doing things but I sort of suspected as much.

thanks I will have a look at movetree,

Thanks again

Leon
0
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
Comment Utility

MoveTree will happily move over user accounts, or entire OUs filled with User Accounts. It saves on migrating those; we've used it a number of times within our forest. As it preserves everything to do with the account it's quite pleasant.

Computers might benefit from ADMT (if it works) as it will rewrite the user profile and such for the new domain.

You might be able to Backup and Restore policies using Group Policy Management Console (I've never tried to restore to a seperate domain):

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

You can use ADMT to move user accounts, but because it's within the same forest you'll end up with a lot of complaints about conflicting usernames and such - very very messy.

Chris
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

by Batuhan Cetin In this article I will be guiding through the process of removing a failed DC metadata from Active Directory (hereafter, AD) using the ntdsutil tool in a Windows Server 2003 environment. These steps are not necessary in a Win…
Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now