Windows Server

TagaR · Guest

I've successfuly migrated a test user account and it's password from the NT
domain to my W2K3 AD. I have questions though;

The user I migrated has a user folder in the nt domain and also an Exchange
mailbox. Upon completion of the migration, will the user folder/mailbox
permission changed from ntdomain\user to w2k3domain\user? What I'm seeing is
that nothing has changed on that part which would mean I have to remap them
to the new domain?

Thanks
TagaR

Frances [MSFT] · Guest

Hello TagaR,

Thanks for your post.

I would like to explain the process of migration first.

Migration mainly includes group/user migration, computer migration and
security translation (optional). Regarding to your scenario, you have
completed the user migration part, which migrates the test user to the new
domain. However, the resources have not been migrated yet, so the user
folder/mailbox will not change from ntdomain\user to w2k3domain\user.

The migration of a computer will migrates the resources to the new domain.
In the Computer Migration Wizard, you can choose to translate the following
objects: Files and folders, Local groups, Printers, Registry, Shares, User
profiles and User Rights. You may select Files and folders, User profiles
and User Rights to achieve your goal. Since you can also select the User
Rights, Registry, we can perform the computer migration and security
translation at the same time.

I have provided the following articles for you with more information on
this:

Active Directory Migration Tool Overview
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt.
asp

Migrating from Windows NT Server 4.0 to Windows Server 2003
http://www.microsoft.com/downloads/details.aspx?FamilyID=e92cf6a0-76f0-4e25-
8de0-19544062a6e6&DisplayLang=en

As for the Exchange mailbox, I suggest that you post all Exchange-related
question in the following newsgroup since they are the experts in Exchange
and will provide the most accurate information:
microsoft.public.exchange.setup

In addition, I will give you an example to show you how to migrate local
user profiles.

NOTE: The user account is user1, the client XP is called ClientXP. The NT
domain called Domain, destination is Win2k3Dom.

Before the migration:
1. Add NT Domain Admin to Win2k3Dom Domain admins group and Win2k3Dom
built-in administrators.
2. Add Win2k3Dom Domain admins group to NT Domain admins group and built-in
administrators group.
3. Assume the account TEST is the NT domain account, add TEST to NT
built-in administrators group and NT Domain admins group. Therefore, TEST
account will have the full control permission to NT domain every clients
and the DC, it also has the permission on Win2k3Dom DC.
4. Use TEST to logon to the Win2k3Dom DC to peroform ADMT migration.

Migration:

Use user1 to logon to NT domain, you will find the profile is located to
c:\documents and settings\user1.domain

1. Logon to the win2k3dom DC and run ADMT to migrate user account user1.

2. Migrate computer account ClientXP. During the migration, tick User
profile on Translate objects screen.

3. Choose Replace mode.

4. Follow the wizard to migrate the computer account.

5. Go to XP client, log on to the win2k3dom. You will find the user profile
is still using c:\documents and settings\user1.Win2k3Dom.

If anything is unclear, please feel free to let me know. I look forward to
hearing from you!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

TagaR · Guest

Hi Frances,

Thank you for your detailed educational response.

Our migration strategy is to do it on stages. Currently we only have flat nt
domain. I created already the first new w2k3 domain. I will also build the
other child domains probably six and have them ready on remote locations.
Here's some of the vents;

1. Migrate user accounts for now in one remote location to their new child
domain. All shared files and folder and mailboxes will still be in nt domain.
2. Until the first location is good, we move on the next location and so on...
3. Migrate desktops/profiles etc
4. Migrate Exchange and other application servers.

We may not be able to migrate at one go.

Thanks
TagaR

"Frances [MSFT]" wrote:

Frances [MSFT] · Guest

Hello TagaR,

Thanks for your post.

I will give you the best practice for migration. Hope it is helpful to you.

The Recommended Migration Order is listed below for your reference:
1. Trust migration (UI Only)
2. Service account migration
3. Domain Global Group
4. Domain Local Group
5. User migration
6. Computer migration
7. Security translation
8. Report

The work of migrating desktops/profiles etc is included in the Computer
Migration.

For more details about user profile migration, please refer to the
following link:

Remigrating User Accounts and Workstations in Batches
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/deploy
guide/en-us/Default.asp?url=/resources/documentation/WindowsServ/2003/all/de
ployguide/en-us/dssbi_reer_zgwe.asp

Regarding the Exchange part, I suggest that you post in the
microsoft.public.exchange.setup newsgroup to get more help.

If you have any further questions don't hesitate to get in touch. Good
luck!

Best regards,

Frances He

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

	Windows Server Forum Index -> Migration	All times are GMT
Page 1 of 1