Help with selecting Active Directory Migration Product

Posted on 2011-05-06
Last Modified: 2012-06-21

I am in the planning stages of AD Migration that will involve migrating everything (users, desktop/laptop/servers) from 8 domains in 5 forests into single forest with 6 domains.  Source domains include Windows 2000, Windows 2008, Windows 2008 R2.  Target domain is Windows 2008 R2.  Total number of users is about 8,000.  Currently we are looking for a tool to purchase/use.

Currently we are looking at Quest MM, ADTM and possibly any other tools that are out there.  I have pretty good AD experience, but I have never performed AD migrations myself before.  However in the past I was part couple of such migrations as a junior admin, where consultants came in and did the migrations for us.  Of course, none of us learned a whole a lot from consultants, but at least I have learned that Quest MM which they were using is a pretty good migration product.  That is what I am trying to push.

Of course, once I received a quote for Quest MM, it “did not receive a positive reaction” from management.  I am also now asked to look at any other commercial tools that are out there.  

1.  Can anyone tell me what other migration products are out there and if you had any experience with them.  ADMT has such a generic name, that it’s hard to search Google for other products with same functionality.

2.  Can some one help me with convincing to go with Quest.  I am having a hard time finding any comparison articles.  I know they can’t really be compared directly, but I am comparing a migration process while using QMM vs ADMT.  Quest MM obviously cost a lot of money, but since a lot of companies use it, it must worth it and must save money in the long run.  I need to convince management that using hundred thousand dollar product over zero dollar product would somehow be good for the company.

Question by:Alexey91
    LVL 13

    Accepted Solution

    "Quest MM obviously cost a lot of money"

    Wouldn't it pay to get an expert helping to get things done ?
    If you are experienced in AD, you might just need some advise from someone doing migrations like this more often. Tools can help you, but they can not design the new single Forest 6 Domain Solution you got in mind. A discussion with a pro about the Pro's/Con's of your design and the tools that could get you there, are always worse the money.

    I never used other tools then ADMT in the past and with powershell you can do a lot more with AD Objects these days.
    LVL 14

    Assisted Solution

    I've personally used Quest in the past when I merged two companies together.  It migrates the accounts, groups, desktops and mail + keeps them in sync until you switch.

    I know it's expensive but its market leader in migration.  Quest will come to site and install and configure the product, this is mandatory when you purchase.

    The size you’re migrating I won’t use ADMT...
    LVL 17

    Assisted Solution

    by:Tony Massa
    Are you migrating/consolidating exchange environments as well?

    Vinchenzo is's expensive for a reason.  It's worth it.  I've done dozens of migrations and ADMT is good for small environments, it would be a disaster for a large one.  

    Quest can constantly keep groups in sync so when normal operations are continuing, you won't have to constantly repeat group migrations with ADMT.  If the company values their day-to-day operations, they will purchase the Quest product...otherwise, you will get a million troubleshooting calls for access and logon issues.

    There is a lot to learn about performing migrations:
    SCRIPTING!!!  (You often will have to do a lot of this)
    Importance of SIDhistory
    ReOrgainzation of AD structures
    Application Authentications (NTLM and Kerberos) issues
    Integrated Windows authentication for web apps
    Trusts (Forest and Domain)
    AdminCount attribute (Protected Accounts) and the AdminSDHolder and SDProp process
    Cross-Forest Group Policy Processing
    Desktop and profile migrations (including personal SSL certificates)

    It's a big process, with a lot of planning, and you don't need to get cheap with it...that's a recipie for a bad migration experience for everyone involved.

    Good Luck to you.
    LVL 1

    Author Comment

    Thanks everyone.  I think that we will definitely get a consultant in for at least planning stages and just to help us understand the process in depth, then we will select a tool.


    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Do email signature updates give you a headache?

    Do you feel like all of your time is spent managing email signatures? Too busy to visit every user’s desk to make updates? Want high-quality HTML signatures on all devices, including on mobiles and Macs? Then, let Exclaimer solve all your email signature problems today!

    Do you have users whose passwords are expiring and they are constantly calling you?  Well I sure did and needed a way to put an end to this.  We have a lot of remote users which would not be notified that their passwords were expiring since they wer…
    Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
    This tutorial will give a short introduction and overview of Backup Exec 2012 and how to navigate and perform basic functions. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as conne…
    This tutorial will give a short introduction and overview of Backup Exec 2014 and the additional features that have been added over its predecessor Backup Exec 2012. As with Backup Exec 2012, the Backup Exec button in the upper left corner. From her…

    758 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    13 Experts available now in Live!

    Get 1:1 Help Now