Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 192
  • Last Modified:

Window 2003 SP1 AD Migration to Windows 2003 SP1 AD

I'm sure their are simple guides for this but i was wondering how easy it is to migrate from a child domain to a parent domain in Active Directory.  We have a parent/child setup, and want to simplify the configuration as their is no need to have this type of setup.  The problem is that 99.9 percent of all users, groups, policies etc run under the child domain and was wondering firstly what version of ADMT to use (2 or 3 or other?).  I have aquired a new server which is going to be a new DC (of the parent domain) that holds the main roles, and secondly does anyone know of a straight forward guide to this type of migration?  There seems to be lots of guides for nt to ad migration etc, but nothing for this type of migration?

Many thanks as usual

Leon
0
leont
Asked:
leont
  • 2
1 Solution
 
Chris DentPowerShell DeveloperCommented:

Hi Leon,

I advise you use MoveTree and not ADMT if both domains are within the same forest.

It's part of the Support Tools and should be on your Windows Server CD. Documentation for it is here:

http://support.microsoft.com/kb/238394

For user accounts they will have to be removed from any groups they are a member of prior to the move, but they can be added back in afterwards. It wouldn't be too tricky to script that kind of thing.

Chris
0
 
leontAuthor Commented:
Thanks for replying so quickly Chris.  So you would have to delete the user accounts and recreate them in the destination domain? it also says computer objects cannot be moved, so presumably they have to be re-added to the destination domain? and it also recommends recreating any policies on the destination domain.  Seems a long winded way of doing things but I sort of suspected as much.

thanks I will have a look at movetree,

Thanks again

Leon
0
 
Chris DentPowerShell DeveloperCommented:

MoveTree will happily move over user accounts, or entire OUs filled with User Accounts. It saves on migrating those; we've used it a number of times within our forest. As it preserves everything to do with the account it's quite pleasant.

Computers might benefit from ADMT (if it works) as it will rewrite the user profile and such for the new domain.

You might be able to Backup and Restore policies using Group Policy Management Console (I've never tried to restore to a seperate domain):

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

You can use ADMT to move user accounts, but because it's within the same forest you'll end up with a lot of complaints about conflicting usernames and such - very very messy.

Chris
0

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now