Solved

moving servers between domains and keeping the ACLs

Posted on 2013-11-25
1
346 Views
Last Modified: 2013-12-03
My company is in the process of merging 2 separate domains into one domain. It is not going to be a forklift type so, the users will have an account in each domain until all of the shared resources have been completed moved at which point the 2way trust will be removed and the old domain will be shutdown. My question is how can I get a dump of the security rights that the users have on the current servers so, when the server is moved into the new domain I can setup their new domain account with the same access as their current in the soon to be shutdown domain. I have used accesschk to get general access but, it doesn't go into detail enough for me to get the access rights the same. Any help would be appreciated.

Thanks
0
Comment
Question by:jfholloway
1 Comment
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 500 total points
ID: 39676752
You can use ADMT to migrate the file server the permission will be intact.http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_28290141.html#a39637776

If you want to migrate user/computers from one domain to new domain using ADMT tool you need to create trust relationship between two domain.

You need to understand nuances of ADMT and its working before you actually taken on migration production env.Also, its much better if you can simulate in a lab environment for successful result. I have below link which might help you to understand this. Start from reading ADMT guide first.

ADMT Guide: Migrating and Restructuring Active Directory Domains
http://technet.microsoft.com/en-us/library/cc974332(WS.10).aspx

http://social.technet.microsoft.com/wiki/contents/articles/13904.how-to-migrate-users-across-forest-cross-forest-using-admt-3-2-with-sid-and-passwords.aspx

MIGRATING STUFF WITH ADMTV3
http://blogs.dirteam.com/blogs/jorge/archive/2006/12/27/Migrating-stuff-with-ADMTv3.aspx

http://blogs.technet.com/b/askds/archive/2010/06/19/admt-3-2-released.aspx

http://blogs.technet.com/b/activedirectoryua/archive/2009/10/01/mergers-acquisitions-or-reorganizations-may-have-you-considering-active-directory-restructuring.aspx

Hope this helps
0

Featured Post

[Webinar] Disaster Recovery and Cloud Management

Learn from Unigma and CloudBerry industry veterans which providers are best for certain use cases and how to lower cloud costs, how to grow your Managed Services practice in IaaS clouds, and how to utilize public cloud for Disaster Recovery

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scenario:  You do full backups to a internal hard drive in either product (SBS or Server 2008).  All goes well for a very long time.  One day, backups begin to fail with a message that the disk is full.  Your disk contains many, many more backups th…
Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now