rj4510
asked on
Move user permissions from old domain to new.
Hello,
Were planning on migrating our users from our old domain to our new domain. E-mail has already been migrated, using new accounts instead of transferring the SID history. I'm looking for a way to create groups on the new domain and assign the groups to the users existing new domain accounts. Can you recommend any tools or scripts which can align old accounts with the new ones and add proper permissions to the new accounts?
Both domains trust each other and we are using Win2k3 domain controllers on both domains.
Were planning on migrating our users from our old domain to our new domain. E-mail has already been migrated, using new accounts instead of transferring the SID history. I'm looking for a way to create groups on the new domain and assign the groups to the users existing new domain accounts. Can you recommend any tools or scripts which can align old accounts with the new ones and add proper permissions to the new accounts?
Both domains trust each other and we are using Win2k3 domain controllers on both domains.
Not to mention the ADMT will also change those user and object IDs to match the new domain Identifiers. Makes things a lot easier.
ASKER
What if the user names do not match on domain B. Can the old user names be mapped by ADMT?
Thanks
Thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thanks for your help.
the Active Directory Migration Tool has an option to merge accounts in the source domain with accounts in the target domain when it finds accounts that have the same name, which would alleviate the "Accounts already exist in the new domain" problem. Would this be sufficient for your needs? (Can't beat the price, it's free.) http://www.microsoft.com/downloads/details.aspx?FamilyId=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en
Hope this helps.
Laura E. Hunter - Microsoft MVP: Windows Server - Networking