?
Solved

Migrate 2003 domain computers to 2008 R2 domain.

Posted on 2011-09-26
14
Medium Priority
?
265 Views
Last Modified: 2012-06-09
Objective: Move from a Server 2003 domain named hq.OldDomain.com with Exchange 2003 to Server 2008 R2 domain named hq.NewDomain.com with Exchange 2010

Already done:
Created a new domain, installed Exchange 2010.
Setup two way trust between domains, fixed up DNS, all that was good.
Used ADMT 3.2 to migrate users to the new domain while leaving the old domain accounts intact.
Moved mailboxes from Exchange 2003 to Exchange 2010.
Users are successfully using their mailboxes on Exchange 2010, Outlook is authenticating with their NewDomain credentials.

Gave NewDomain users rights to shares on OldDomain server and vice versa
The computers are still on OldDomain; users login to OldDomain; all shares still on OldDomainServer.
GPO on the old domain redirects their My Documents to OldDomainServer\Users\%username%\My Documents.  

To do:
Now it's time to move their computer to NewDomain, and fix it up so that when they login to their computers, they will get their existing profile, and their My Documents will be redirected to \\NewDomainServer\Users\%username%\My Documents.  Profiles are local, not roaming.
Most computers are XP, with a few Win7.
Already robocopied the folders \\OldDomainServer\Users to \\NewDomainServer\Users, and created a group policy in the new domain to redirect Documents to \\NewDomainServer\Users\username\My Documents

I'm confused about the steps from here.  

What do I check in the "Computer Migration Wizard"? And do I have to do anything after rebooting the computer?  Security Translation Wizard?

I did a test on one computer.  After ADMT, BOTH domains were shown in the Log On To selection (as well as the computername). Great for now, but I'd like OldDomain to disappear eventually.  

There were previously two user profiles on that computer.   After migration, when I logged in to NewDomain as first user, it created a new profile for that user instead of reusing the existing profile. When I logged in to NewDomain as the second user, it properly reused the existing profile, but My Documents was not redirected.  What do I do to fix that?  And I need to know existing users are going to get their existing profiles before I start migrating real users.

Thanks.


0
Comment
Question by:avalonnyc
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 7
  • 4
  • 2
  • +1
14 Comments
 
LVL 7

Expert Comment

by:ComputerBeast
ID: 36598929
Hi,

Refer to the article:
http://technet.microsoft.com/en-us/library/dd379531(WS.10).aspx

for the complete migration help.

Thank you
Anil
0
 

Author Comment

by:avalonnyc
ID: 36599482
Thank you for your comment, Anil.  I have read not only the document you referenced, which does not address the task I posted about (migrating the users' computers to the new domain while preserving user profiles), but also the ADMT documentation, which does.  I posted the question not because I'm unable to read, but because the documentation provides procedures applicable to many scenarios, without, in my estimation, clearly laying out the procedures one would follow for a particular scenario.  

I look forward to hearing from an EE member who has done what I am trying to do, and can give me a step-by-step guide for this last bit of our migration, or point me to a document with that.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36599748
I am not fully able to understand you expectations, but have a look at these:
ADMT v3 Migration Guide
 http://www.microsoft.com/downloads/d...770-3BBB-4B9E-
 A8BC-01E9F7EF7342&displaylang=en
 
Support WebCast: Domain Migration Using the Microsoft Active Directory
 Migration Tool
 http://support.microsoft.com/kb/325393
 
A
0
Enterprise Mobility and BYOD For Dummies

Like “For Dummies” books, you can read this in whatever order you choose and learn about mobility and BYOD; and how to put a competitive mobile infrastructure in place. Developed for SMBs and large enterprises alike, you will find helpful use cases, planning, and implementation.

 
LVL 6

Expert Comment

by:Em Man
ID: 36690558
How about Relocating the Profile Directory?

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList

Value Name: ProfilesDirectory
Value Data: %SystemDrive%\Documents and Settings
0
 

Author Comment

by:avalonnyc
ID: 36708524
Thanks Taga.  I considered that, but there are quite a few machines, sometimes several profiles on each machine and the computers still need to be moved to the new domain.  I thought instead of spending a few days writing, testing and debugging scripts to do what Microsoft created ADMT to do, I'd start by seeing if there's someone at EE who's done a cross-forest migration with ADMT before.
0
 

Accepted Solution

by:
avalonnyc earned 0 total points
ID: 36708540
Thanks Ackles.  Unfortunately, neither of the links you posted work .   If the first one was supposed to be the 263 page "ADMT Guide: Migrating and Restructuring Active Directory Domains" which, as I mentioned above, I've already read, you don' t need to repost it.

My expectations: none.  My hope: that someone with expertise in this area will read my post,  and answer the particular questions I asked and save me a few hours testing before I can migrate these computers to their new domain using ADMT 3.2
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36708554
M sorry, I didn't mean to waste your time...
0
 
LVL 6

Expert Comment

by:Em Man
ID: 36716748
UP and lets wait for someone... while I'm looking for some scripts.. issue is interesting. it might happen to us someday.
0
 

Author Comment

by:avalonnyc
ID: 36957531
Thanks Ackles, I didn't mean to imply you were wasting my time.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36957630
Listen, I will have to look for the profile however the Documents & all I can tell you a straight forward way:
Let the new profile be created & after that just run Robocopy to get all the documents to new location.

I have done this & it works pretty smooth.

What do you think?
A
0
 

Author Comment

by:avalonnyc
ID: 36992768
Thanks for your comment.  I have moved profiles many times using xcopy, robocopy, moveuser and recently, the Win32_UserProfile WMI provider.   Of course, there is fixing up to do after that since just copying the files doesn't deal with user registry.    For 25, 50 or 200 users, that's a lot of work.    That's why I am looking at ADMT for this project.  BTW, I also know there are also a lot of 3rd party tools that implement this functionality.
0
 
LVL 11

Expert Comment

by:Ackles
ID: 36992969
Let me run a test later, I think if u delete the registry & reboot the computer it will create a registry but will map to the same user folder.
Try making a test user or I can test later?
0
 

Author Comment

by:avalonnyc
ID: 36993635
Ok, I'll be checking in.
0
 

Author Closing Comment

by:avalonnyc
ID: 38065267
The reason I accepted my own comment is that nobody who answered addressed the questions I asked, which was how to use ADMT to migrate computers and their profiles to a new domain.   Rather than risk a gigantic mess, we ended up doing it manually, which meant copying files; configuring Outlook profiles installing printers, etc.   Funny that Microsoft would invest so much in developing the Active Directory Migration Tool and make it so hard to figure out how to use it that not a single EE user would even take a stab at answering the question.
0

Featured Post

NFR key for Veeam Agent for Linux

Veeam is happy to provide a free NFR license for one year.  It allows for the non‑production use and valid for five workstations and two servers. Veeam Agent for Linux is a simple backup tool for your Linux installations, both on‑premises and in the public cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Group policies can be applied selectively to specific devices with the help of groups. Utilising this, it is possible to phase-in group policies, over a period of time, by randomly adding non-members user or computers at a set interval, to a group f…
Let's recap what we learned from yesterday's Skyport Systems webinar.
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question