• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1298
  • Last Modified:

Using ADMT to Migrate User Accounts from Windows 2000 AD Domain to a Windows 2008 Domain

Hi Experts,

I created a lab environment to start working on a server migration project.  My goal is to move the user accounts from a Windows 2000 AD Server to a Windows 2008 AD Server.  I have information overload from Google, but I did not find any web page that has steps 1 through 100 that show you exactly how to do this.

I believe that what I need to do is run MS's ADMT and then figure out the rest of the process.  

What I've done so far is:
Convert our existing AD server to a VM
Created a new VM with Windows 2008 - I also installed AD services and ran DC Promo.  This also confgured DNS
On each server, I then created Secondary zones on each server

So far I think I'm on the right track...

Now when I run MS ADMT, it states that my Admin account on 2008 does not have access to the 2000 Admin account (not using the verbatim error message).  

Can anyone explain to me verbatim what to do to enable trusts between both servers?  Or am I going about this totally wrong?

Thanks!
0
byd2k
Asked:
byd2k
  • 2
1 Solution
 
LauraEHunterMVPCommented:
AD migrations require that a trust relationship be in place. You need to configure an external trust from the 2000 domain to the 2008 domain, and vice versa.

The procedures to do so are described here: http://technet.microsoft.com/en-us/library/cc738617.aspx
0
 
byd2kAuthor Commented:
Thanks for your reply.

On the Windows 2000 server, I ended up getting to step 4 where you have to enter in the other domain name.

Windows comes back with the error:  

AD cannot verify the trust.

The error returned was:  The security database on the server does not have a computer account for this workstation trust relationship.

I tried to do as the instructions state, but I can't add this server as a computer on the other server because the trust isn't setup correctly.  ;)

I upped the points.

Thanks again,
byd2k
0
 
byd2kAuthor Commented:
Thanks for your help.  The instructions were pretty generic.  What I actually had to do was this process, however from the Windows 2008 side.  When I configured the server from the 2008 side for trust, it populated the trusts in Windows 2000.  For some reason I could not follow the instructions verbatim.

Thanks again,
Byd2k
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now