We help IT Professionals succeed at work.

Window 2003 SP1 AD Migration to Windows 2003 SP1 AD

leont
leont asked
on
Medium Priority
211 Views
Last Modified: 2010-04-18
I'm sure their are simple guides for this but i was wondering how easy it is to migrate from a child domain to a parent domain in Active Directory.  We have a parent/child setup, and want to simplify the configuration as their is no need to have this type of setup.  The problem is that 99.9 percent of all users, groups, policies etc run under the child domain and was wondering firstly what version of ADMT to use (2 or 3 or other?).  I have aquired a new server which is going to be a new DC (of the parent domain) that holds the main roles, and secondly does anyone know of a straight forward guide to this type of migration?  There seems to be lots of guides for nt to ad migration etc, but nothing for this type of migration?

Many thanks as usual

Leon
Comment
Watch Question

Chris DentPowerShell Developer
CERTIFIED EXPERT
Top Expert 2010

Commented:

Hi Leon,

I advise you use MoveTree and not ADMT if both domains are within the same forest.

It's part of the Support Tools and should be on your Windows Server CD. Documentation for it is here:

http://support.microsoft.com/kb/238394

For user accounts they will have to be removed from any groups they are a member of prior to the move, but they can be added back in afterwards. It wouldn't be too tricky to script that kind of thing.

Chris

Author

Commented:
Thanks for replying so quickly Chris.  So you would have to delete the user accounts and recreate them in the destination domain? it also says computer objects cannot be moved, so presumably they have to be re-added to the destination domain? and it also recommends recreating any policies on the destination domain.  Seems a long winded way of doing things but I sort of suspected as much.

thanks I will have a look at movetree,

Thanks again

Leon
PowerShell Developer
CERTIFIED EXPERT
Top Expert 2010
Commented:

MoveTree will happily move over user accounts, or entire OUs filled with User Accounts. It saves on migrating those; we've used it a number of times within our forest. As it preserves everything to do with the account it's quite pleasant.

Computers might benefit from ADMT (if it works) as it will rewrite the user profile and such for the new domain.

You might be able to Backup and Restore policies using Group Policy Management Console (I've never tried to restore to a seperate domain):

http://www.microsoft.com/windowsserver2003/gpmc/default.mspx

You can use ADMT to move user accounts, but because it's within the same forest you'll end up with a lot of complaints about conflicting usernames and such - very very messy.

Chris

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.