Solved

Migrate 2003 domain computers to 2008 R2 domain.

Posted on 2011-09-26
14
249 Views
Last Modified: 2012-06-09
Objective: Move from a Server 2003 domain named hq.OldDomain.com with Exchange 2003 to Server 2008 R2 domain named hq.NewDomain.com with Exchange 2010

Already done:
Created a new domain, installed Exchange 2010.
Setup two way trust between domains, fixed up DNS, all that was good.
Used ADMT 3.2 to migrate users to the new domain while leaving the old domain accounts intact.
Moved mailboxes from Exchange 2003 to Exchange 2010.
Users are successfully using their mailboxes on Exchange 2010, Outlook is authenticating with their NewDomain credentials.

Gave NewDomain users rights to shares on OldDomain server and vice versa
The computers are still on OldDomain; users login to OldDomain; all shares still on OldDomainServer.
GPO on the old domain redirects their My Documents to OldDomainServer\Users\%username%\My Documents.  

To do:
Now it's time to move their computer to NewDomain, and fix it up so that when they login to their computers, they will get their existing profile, and their My Documents will be redirected to \\NewDomainServer\Users\%username%\My Documents.  Profiles are local, not roaming.
Most computers are XP, with a few Win7.
Already robocopied the folders \\OldDomainServer\Users to \\NewDomainServer\Users, and created a group policy in the new domain to redirect Documents to \\NewDomainServer\Users\username\My Documents

I'm confused about the steps from here.  

What do I check in the "Computer Migration Wizard"? And do I have to do anything after rebooting the computer?  Security Translation Wizard?

I did a test on one computer.  After ADMT, BOTH domains were shown in the Log On To selection (as well as the computername). Great for now, but I'd like OldDomain to disappear eventually.  

There were previously two user profiles on that computer.   After migration, when I logged in to NewDomain as first user, it created a new profile for that user instead of reusing the existing profile. When I logged in to NewDomain as the second user, it properly reused the existing profile, but My Documents was not redirected.  What do I do to fix that?  And I need to know existing users are going to get their existing profiles before I start migrating real users.

Thanks.


0
Comment
Question by:avalonnyc
  • 7
  • 4
  • 2
  • +1
14 Comments
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 36598929
Hi,

Refer to the article:
http://technet.microsoft.com/en-us/library/dd379531(WS.10).aspx

for the complete migration help.

Thank you
Anil
0
 

Author Comment

by:avalonnyc
ID: 36599482
Thank you for your comment, Anil.  I have read not only the document you referenced, which does not address the task I posted about (migrating the users' computers to the new domain while preserving user profiles), but also the ADMT documentation, which does.  I posted the question not because I'm unable to read, but because the documentation provides procedures applicable to many scenarios, without, in my estimation, clearly laying out the procedures one would follow for a particular scenario.  

I look forward to hearing from an EE member who has done what I am trying to do, and can give me a step-by-step guide for this last bit of our migration, or point me to a document with that.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36599748
I am not fully able to understand you expectations, but have a look at these:
ADMT v3 Migration Guide
 http://www.microsoft.com/downloads/d...770-3BBB-4B9E-
 A8BC-01E9F7EF7342&displaylang=en
 
Support WebCast: Domain Migration Using the Microsoft Active Directory
 Migration Tool
 http://support.microsoft.com/kb/325393
 
A
0
 
LVL 6

Expert Comment

by:Em Man
ID: 36690558
How about Relocating the Profile Directory?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Value Name: ProfilesDirectory
Value Data: %SystemDrive%\Documents and Settings
0
 

Author Comment

by:avalonnyc
ID: 36708524
Thanks Taga.  I considered that, but there are quite a few machines, sometimes several profiles on each machine and the computers still need to be moved to the new domain.  I thought instead of spending a few days writing, testing and debugging scripts to do what Microsoft created ADMT to do, I'd start by seeing if there's someone at EE who's done a cross-forest migration with ADMT before.
0
 

Accepted Solution

by:
avalonnyc earned 0 total points
ID: 36708540
Thanks Ackles.  Unfortunately, neither of the links you posted work .   If the first one was supposed to be the 263 page "ADMT Guide: Migrating and Restructuring Active Directory Domains" which, as I mentioned above, I've already read, you don' t need to repost it.

My expectations: none.  My hope: that someone with expertise in this area will read my post,  and answer the particular questions I asked and save me a few hours testing before I can migrate these computers to their new domain using ADMT 3.2
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36708554
M sorry, I didn't mean to waste your time...
0
Don't lose your head updating email signatures!

Do your end users still have the wrong email signature? Do email signature updates bore you or fill you with a sense of dread? You can make this a whole lot easier on yourself by trusting an Exclaimer email signature management solution. Over 50 million users do...so should you!

 
LVL 6

Expert Comment

by:Em Man
ID: 36716748
UP and lets wait for someone... while I'm looking for some scripts.. issue is interesting. it might happen to us someday.
0
 

Author Comment

by:avalonnyc
ID: 36957531
Thanks Ackles, I didn't mean to imply you were wasting my time.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36957630
Listen, I will have to look for the profile however the Documents & all I can tell you a straight forward way:
Let the new profile be created & after that just run Robocopy to get all the documents to new location.

I have done this & it works pretty smooth.

What do you think?
A
0
 

Author Comment

by:avalonnyc
ID: 36992768
Thanks for your comment.  I have moved profiles many times using xcopy, robocopy, moveuser and recently, the Win32_UserProfile WMI provider.   Of course, there is fixing up to do after that since just copying the files doesn't deal with user registry.    For 25, 50 or 200 users, that's a lot of work.    That's why I am looking at ADMT for this project.  BTW, I also know there are also a lot of 3rd party tools that implement this functionality.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36992969
Let me run a test later, I think if u delete the registry & reboot the computer it will create a registry but will map to the same user folder.
Try making a test user or I can test later?
0
 

Author Comment

by:avalonnyc
ID: 36993635
Ok, I'll be checking in.
0
 

Author Closing Comment

by:avalonnyc
ID: 38065267
The reason I accepted my own comment is that nobody who answered addressed the questions I asked, which was how to use ADMT to migrate computers and their profiles to a new domain.   Rather than risk a gigantic mess, we ended up doing it manually, which meant copying files; configuring Outlook profiles installing printers, etc.   Funny that Microsoft would invest so much in developing the Active Directory Migration Tool and make it so hard to figure out how to use it that not a single EE user would even take a stab at answering the question.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

A quick step-by-step overview of installing and configuring Carbonite Server Backup.
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will give a an overview on how to deploy remote agents in Backup Exec 2012 to new servers. Click on the Backup Exec button in the upper left corner. From here, are global settings for the application such as connecting to a remote Back…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…

757 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

23 Experts available now in Live!

Get 1:1 Help Now