Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1425
  • Last Modified:

Migration from NT4 to Windows 2008 R2: domain name and share access

Hi all,

I'm  migrating around 500 users from a windows NT4 PDC to a windows 2008 R2 AD. I have all the user information on an external database, so my idea is to recreate the users on the 2008 domain, instead of using ADMT.

What I'm not sure of, is if I have to give to the new domain, the same name used for the NT4, or if I can use a new one. Do you know what's going to happen to users local settings?  I guess that if I use a different domain name, once the user logs into the local machine, a DOMAINNAME.username folder is going to be create. Is there any way to move the settings from the old folder?

Also we relay on groups to manage the way users access to file share. If I don't change the domain name, is this mechanism going to work? If I change the domain name, do you know if there is an automated way to map the permission so that:

OLDDOMAIN\group -> NEWDOMAIN\group

 
Thanks in advance
0
jimbobrocks
Asked:
jimbobrocks
  • 2
1 Solution
 
KenMcFCommented:
even if you create a new domain with the same name all the SIDs will be differnet. So when the users log onto their computer they will get a new profile. You will also need to set all the security permission on resources. The ADMT is able to migrate the SIDs to the new domain.

There are utilities to move users profiles, one is moveusers.exe from microsoft

http://ss64.com/nt/moveuser.html
0
 
jimbobrocksAuthor Commented:
KenMcF thanks for the reply. My understanding is that ADMT cannot migrate from NT4 to 2008. So I need to do:
NT4 -> 2003 DC -> 2008 DC

and keep the same domain name, can I avoid running the moveusers.exe on each machine? At the moment users have lot's of stuff in their profile stored locallly, and run moveusers on each machine will be challenging.

Also if I go trough the migration route, are windows share going to work in the same way?

Thanks again.
0
 
KenMcFCommented:
Where are you shares located? Are they on the Domain Controller?

One thing you can do is bring up a Virtual NT4 BDC.
Make that the PDC after the install then upgrade to 2003.
Remove the NT4 server from the domain following the proper steps.
Then do the migration or just build the new 2008 DC in that domain.
If you keep it in the same domain there will be not user, computer, share, etc. migration.

http://technet.microsoft.com/en-us/library/bb742548.aspx

http://technet.microsoft.com/en-us/library/cc754670(WS.10).aspx
0

Featured Post

Free Tool: Site Down Detector

Helpful to verify reports of your own downtime, or to double check a downed website you are trying to access.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now