?
Solved

moving servers between domains and keeping the ACLs

Posted on 2013-11-25
1
Medium Priority
?
388 Views
Last Modified: 2013-12-03
My company is in the process of merging 2 separate domains into one domain. It is not going to be a forklift type so, the users will have an account in each domain until all of the shared resources have been completed moved at which point the 2way trust will be removed and the old domain will be shutdown. My question is how can I get a dump of the security rights that the users have on the current servers so, when the server is moved into the new domain I can setup their new domain account with the same access as their current in the soon to be shutdown domain. I have used accesschk to get general access but, it doesn't go into detail enough for me to get the access rights the same. Any help would be appreciated.

Thanks
0
Comment
Question by:jfholloway
1 Comment
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 2000 total points
ID: 39676752
You can use ADMT to migrate the file server the permission will be intact.http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_28290141.html#a39637776

If you want to migrate user/computers from one domain to new domain using ADMT tool you need to create trust relationship between two domain.

You need to understand nuances of ADMT and its working before you actually taken on migration production env.Also, its much better if you can simulate in a lab environment for successful result. I have below link which might help you to understand this. Start from reading ADMT guide first.

ADMT Guide: Migrating and Restructuring Active Directory Domains
http://technet.microsoft.com/en-us/library/cc974332(WS.10).aspx

http://social.technet.microsoft.com/wiki/contents/articles/13904.how-to-migrate-users-across-forest-cross-forest-using-admt-3-2-with-sid-and-passwords.aspx

MIGRATING STUFF WITH ADMTV3
http://blogs.dirteam.com/blogs/jorge/archive/2006/12/27/Migrating-stuff-with-ADMTv3.aspx

http://blogs.technet.com/b/askds/archive/2010/06/19/admt-3-2-released.aspx

http://blogs.technet.com/b/activedirectoryua/archive/2009/10/01/mergers-acquisitions-or-reorganizations-may-have-you-considering-active-directory-restructuring.aspx

Hope this helps
0

Featured Post

Nothing ever in the clear!

This technical paper will help you implement VMware’s VM encryption as well as implement Veeam encryption which together will achieve the nothing ever in the clear goal. If a bad guy steals VMs, backups or traffic they get nothing.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

New Windows 7 Installations take days for Windows-Updates to show up and install. This can easily be fixed. I have finally decided to write an article because this seems to get asked several times a day lately. This Article and the Links apply to…
A procedure for exporting installed hotfix details of remote computers using powershell
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Suggested Courses

862 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question