Solved

How to use ADMT 3.1 to migrate AD users form Windows 2003 Ent. to EBS 2008?

Posted on 2009-06-28
13
1,689 Views
Last Modified: 2012-05-07
We are presently running Windows 2003 Enterprise Active Directory Domain Controller (domain name : <companyname.com>. We recently purchased Microsoft EBS (Essential Business Server) 2008. As it is an EBS edition we cannot directly upgrade Windows 2003 to EBS 2008. We therfore plan to migrate the Windows 2003 Server to EBS 2008 in the following way as we only want to keep user profile (SID, Password etc.):

1.  Install EBS 2008 in a seperate server.
2.  Configure a seperate domain <xyz.com> on EBS 2008 Server.
3.  Install ADMT 3.1 on top of EBS 2008.
4.  Install Password Expert Server on top of EBS 2008.
5.  Migrate the user accounts (including SID, Password) from Windows 2003 DC to EBS 2008 Server.
6.  Format the Windows 2003 Enterprise Domain Controller and install EBS 2008.
7.  Configure the new EBS 2008 domain with the existing domain name <companyname.com>
8.  Install ADMT 3.1 on the new server.
9.  Install Password Expert Server on the new server.
10.  Migrate the user accounts (including SID, Password) from old EBS 2008 DC (xyz.com) to new EBS 2008 DC (companyname.com).

Can it be possible to do so?
0
Comment
Question by:hchabria
  • 7
  • 6
13 Comments
 
LVL 95

Expert Comment

by:Lee W, MVP
Comment Utility
You can't upgrade, but you should be able to install EBS into an existing domain - then you don't need to migrate using ADMT.

http://technet.microsoft.com/en-us/library/cc768594(WS.10).aspx

If you want a SUCCESSFUL migration to EBS, I suggest you setup a test environment and do it once yourself.  I've not worked directly with it, but I've been in several sessions with Microsoft reps and DEVELOPERS of EBS and I suspect it will be as reliable as SBS if you install it properly... and a mess if you don't.  So practice first, then do it and read the documentation about the product.
0
 

Author Comment

by:hchabria
Comment Utility
We have an existing domain called "mycompanyname.com". I can't understand what do you mean by installing "EBS into an existing domain - and then we don't need to migrate using ADMT"?

Yes, I can install EBS in the existing domain, but will it solve our purpose? Because ultimately we have to format the Windows 2003 Server with EBS and in that case what will happen with existing user accounts? Withour ADMT how can I backup those accounts?

Plesae note that we want to keep existing user profiles including SID, Passwords etc. so that when I configure new domain controller with EBS 2008, I can import these users.
0
 
LVL 95

Expert Comment

by:Lee W, MVP
Comment Utility
If you install EBS into an Existing domain, you would:

1.  Promote one of the EBS servers to a DC (as it expects)
2.  Transfer the FSMO roles from your existing DC(s) to the appropriate EBS servers
3.  Continue working normally.  

It's clear you are aware of EBS, but equally clear, you have not studied its deployment methods appropriately.  I STRONGLY advise you READ the documentation that starts here:
http://technet.microsoft.com/en-us/library/cc540094(WS.10).aspx
0
 

Author Comment

by:hchabria
Comment Utility
Thanks for your advice. However, could you go through the steps (1-10) mentioned in my question and advice me whether this can be possible or not.
0
 
LVL 95

Expert Comment

by:Lee W, MVP
Comment Utility
It seems likely that it's possible - just that it's a bad idea and I wouldn't recommend it.  Given the information you have provided, I have offered you a valid solution that reduces your administrative time and effort.  

WHY do you want to rebuild the domain from scratch when you can simply migrate it to EBS?
0
 

Author Comment

by:hchabria
Comment Utility
As per your solution mentioned below:
1.  Promote one of the EBS servers to a DC (as it expects)
2.  Transfer the FSMO roles from your existing DC(s) to the appropriate EBS servers
3.  Continue working normally.  

if I want to promote the EBS server to a DC, I have to configure the EBS server as an Additional Domain Controller of Windows 2003 Server DC and then transfer the FSMO role to the EBS server to demote Win 2003 DC.

Is it possible to configure EBS as an Additional Domain Controller of the Windows 2003 domain? If possible could you send me the step-by-step docoument about how to do it?
0
Better Security Awareness With Threat Intelligence

See how one of the leading financial services organizations uses Recorded Future as part of a holistic threat intelligence program to promote security awareness and proactively and efficiently identify threats.

 
LVL 95

Accepted Solution

by:
Lee W, MVP earned 500 total points
Comment Utility
This is a copy and paste from the first link I posted - the first one is what I'm recommending for what should be obvious reasons:
Two options are available for configuring Active Directory Domain Services:

    * Connect to an existing domain. If your current environment includes Active Directory, in most cases you will join Windows EBS to the existing domain. When you run the Windows EBS Installation Wizard, your Active Directory environment is upgraded, and then the Management Server and the Messaging Server join your domain as domain controllers. Network services in your current environment that depend on Active Directory migrate automatically to Windows EBS during installation.

    * Set up a new root domain in a new forest. When you install Windows EBS, the Management Server and the Messaging Server become domain controllers in the root domain of the new forest. Select this option if you are not currently using Active Directory in your environment, or if you are planning to create a new domain. After you install Windows EBS, you need to manually move server roles (such as the DNS Server service and the DHCP Server service) and redirect mail flow from your existing environment

As for the step-by-step, READ THE SECOND LINK I POSTED!  You seem to want "x easy steps" - well, you have a domain, and you're installing a complex product - there aren't any "x easy steps" - The closest I can offer is this: http://technet.microsoft.com/en-us/library/cc463409(WS.10).aspx - but I think you would be foolish to just start there.  Start at the SECOND link I posted - that covers the entire process of installation and setup.  If you want to do this right and successfully, that's the place to start.  IF you want to cut corners and probably create problems for yourself, then feel free to use the link in this comment.
0
 

Author Comment

by:hchabria
Comment Utility
Can I configure EBS to be an Additional Domain Controller of Windows 2003 domain?
0
 
LVL 95

Expert Comment

by:Lee W, MVP
Comment Utility
I give up - I have answered your question and you have apparently decided not to read any of the links I've recommended.  To be clear, I'm not going to retype everything that's already written someplace else when you can just go to the link I provided to it.
0
 

Author Comment

by:hchabria
Comment Utility
Dear leew, before putting my query into this forrum I have already gone through the links you sent. Still I had some confusion which I wanted to clear, but it seems that you are annoyed with me.

However, is it possible for you to answer in "YES" or "NO" of my last question?
0
 
LVL 95

Expert Comment

by:Lee W, MVP
Comment Utility
YES I'M ANNOYED!  If you read those documents before posting, THEN YOU SHOULD HAVE SAID SO FROM THE START.

YES.  Now, if you are further uncertain and/or confused about the documentation, POST YOUR CONFUSION.  Copy and paste a paragraph or two AND WHY IT CONFUSES YOU and I'll be happy to interpret.  This will allow me to better understand what you're having difficulty with.
0
 

Author Comment

by:hchabria
Comment Utility
Thanks leew, that is the answer - "YES" - that I wanted to know from the beginning.
0
 
LVL 95

Expert Comment

by:Lee W, MVP
Comment Utility
Then articulate - no where in your initial question did you say "Can I make an EBS DC a DC in my existing domain?" or anything like that.  Your initial question asked about a NEW domain.

0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

I had a question today where the user wanted to know how to delete an SSL Certificate, so I thought that I would quickly add this How to! Article for your reference. WHY WOULD YOU WANT TO DELETE A CERTIFICATE? 1. If an incorrect certificate was …
On July 14th 2015, Windows Server 2003 will become End of Support, leaving hundreds of thousands of servers around the world that still run this 12 year old operating system vulnerable and potentially out of compliance in many organisations around t…
This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now