Windows Server

Joe · Guest

Hi NG,

hope to get some more information from you.
We have to migrate a w2k domain to a new w2k3 domain and want to use admt to
move all users, groups, ou´s etc. to the new forest. Also the fileservers
(all memberservers) should be moved into the new domain when the new domain
is setup properly. Is it possible to keep the file permissions on the
fileservers when we add these memberservers to the new w2k3 domain or do
we´ve to set all file permissions manually? Or what other cost-saving third
party tool can be used to keep the old permissions?
Many thanks in advance.
Joe

Frances [MSFT] · Guest

Hello Joe,

Do you want to move the file servers to the new domain with the original
file permissions? If that i s the case, please use File Server Migration
Toolkit (FSMT). This tool helps you copy files and folders between domains
and maintains security se ttings after the migration. To ensure the
security of files and folders after they are migrated to a target file
server, the File Server Migration Wizard applies permissions that are the
same as or more restrictive than they were on the source files and folders,
depending on the option you select.

You may find more information in the following articles.

Microsoft File Server Migration Toolkit
http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfsc.mspx

Overview of the Microsoft File Server Migration Toolkit
http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfst_over
view.mspx

Frequently Asked Questions About File Server Migration
http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfst_faqs
mspx

Hope it helps. Any updates, let us get in touch!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Joe · Guest

Hi Frances,

thanks for your reply!!! Will check the tool and come back to you when I´ve
any more questions.
Joe

"Frances [MSFT]" <v-franhe@microsoft.com> schrieb im Newsbeitrag
news:FnQIRB78EHA.644@cpmsftngxa10.phx.gbl...

Joe · Guest

Frances,

one more question: Our plan is to move the fileserver from the old into the
new domain. That means we do not change the hardware, just put the server
from dom-old to dom-new. Do we keep the file permissions then without using
any tools?
Joe

"Frances [MSFT]" <v-franhe@microsoft.com> schrieb im Newsbeitrag
news:FnQIRB78EHA.644@cpmsftngxa10.phx.gbl...

Frances [MSFT] · Guest

Hello Joe,

Yes, you are correct. You don't need to use FSMT if file server is hosted
on a member server and you will join it into the new domain.

A kind reminder, if you grant the permission to the old domain user, you
need to use SID mapping file to update the ACLs in the file server. After
the process, the migrated users can access the files with the ACL updated.

We can use Security Translation Wizard with a SID Mapping file to add the
NewDomain\"Domain Users" group's SID to the resources.

To do so:

1. Get the SIDs of both OldDomain\"Domain Users" and NewDomain\"Domain
Users". We can logon as OldDomain\User1, run "whoami.exe /all". From the
return content, we can find the SID of OldDomain\"Domain Users". Please use
this method to get the SID of NewDomain\"Domain Users".

Note: whoami.exe is an utility from Windows 2000 Resource Kit Tools.

2. Create a SID mapping file (should be a txt file). We can name it
sidmapping.txt.

3. Edit the SID mapping file in Notepad and input the following content:

<SID of OldDomain\"Domain Users">, <SID of NewDomain\"Domain Users">

Note: Please put the correct SIDs in the above line.

4. Run ADMT, choose "Security Translation Wizard".

5. On the "Security Translation Options" page, choose "Other objects
specified in a file" and browse to select the sidmapping.txt file created
in Step 2.

6. Follow the wizard to translate resources on ServerA.

7. Please check if the NewDomain\User1 has access to <\\ServerA\Share>.

You can have more details about SID mapping file in the following articles.
How to use a SID mapping file with the ADMT tool to perform a resource
domain migration to Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;835991

Hope it helps. Any updates, let us get in touch!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1