creative555
asked on
password migration with ADMT work around
Hello,
Apparently ADMT doesn't migrate passwords for service accounts even if you installed and configured password export service on DC.
So, what would be the best solution for passwords? Resetting them after migration?
Below is from MS article:
https://technet.microsoft.com/en-us/library/cc974401%28v=ws.10%29.aspx
The password is never migrated when a service account is migrated. Instead, ADMT uses a clear-text representation of the password to configure the services after the service account migration. An encrypted version of the password is then stored in the password.txt file in the ADMT installation folder.
After the service account is migrated, ADMT configures the service on the workstation or the server to use the new password, and the service will now start using the user account in the target domain.
If you miss a service account that shares an account with a service that has already been migrated, ADMT cannot synchronize the service accounts. You must manually change the password for the service account and then reset the service account password on each server that is running that service.
Apparently ADMT doesn't migrate passwords for service accounts even if you installed and configured password export service on DC.
So, what would be the best solution for passwords? Resetting them after migration?
Below is from MS article:
https://technet.microsoft.com/en-us/library/cc974401%28v=ws.10%29.aspx
The password is never migrated when a service account is migrated. Instead, ADMT uses a clear-text representation of the password to configure the services after the service account migration. An encrypted version of the password is then stored in the password.txt file in the ADMT installation folder.
After the service account is migrated, ADMT configures the service on the workstation or the server to use the new password, and the service will now start using the user account in the target domain.
If you miss a service account that shares an account with a service that has already been migrated, ADMT cannot synchronize the service accounts. You must manually change the password for the service account and then reset the service account password on each server that is running that service.
McKnife
Why is there need for action? These accounts are taken care of differently just as described.
ASKER
Im confused. But how about the user account that is running that service? So admt sets up the service with a complex password and the user account is using a different password? we will have to update all the documentation. I would like to have the same password for the service account. IS there a way to keep the same password?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.