Migrating users / computers to Active Directory (AD)

[1koolcat]

Hello,

I have been asked to "migrate" several hundred users from a WINDOWS 2000 domain (SOURCE) to a SERVER 2003 domain (TARGET).

This task seems to be pretty straight forward and I've tackled it with gusto, but after a while it seems like there should be an easier way of accomplishing this without visiting each PC. I've looked around for books on Active Directory that might address this type of migration, but have come up empty handed.

The majority of these workstations have a single default user login with no email accounts. We are not migrating data or changing anything else.

We are simply setting up new ID's in the TARGET DOMAIN with the proper access permissions via GROUP membership, and then changing the domain the machine is logging into. We are also hard coding the DNS server addresses into the TCP/IP configuration for each computer.

Is Microsoft's ADMT a good tool for this type of migration? If so, should I stick to version 2, or should I trust version 3 (released within the past 30 days)?

Thanks in advance for your advice.

Peter

 

[Larsdemo]

You can use the migration tool and use a dhcp server to give the clients the ipconfig they need.

Lars

Network admin for worldwide freight forwarders company.
mcp mcsa\: Messaging mcse -2003

 

[wallst32]

I've used AMDT 2 but the migration was from one Windows 2000 to another Windows 2000 domain. The clients were a mix of NT4 WKS and W2K Pro.

It worked great for the most part. It eliminates a lot of runnning around to all the desktops as you mentioned. It did fail on a small number of workstations But it logs everything so you know right off the bat which systems worked and which ones didn't.

My population was less than several hundred, and I found the tool to be invaluable.

 

[Larsdemo]

What you mean was it working great or was it invaluable ?

Lars

Network admin for worldwide freight forwarders company.
mcp mcsa\: Messaging mcse -2003

 

[StumpedTechy]

Not to be the english teacher Larsdemo but both sayings are synonymous.

working great = You can inffer it adds great value

invaluable = Of great value, Of inestimable value; priceless

 

[djtech2k]

The ADMT leaves a lot of work to do. I would suggest the Quest Domain Migration Wizard. It is great and reasonably priced. It will do everything for you and u dont have to touch any machines.

 

[markdmac]

djtech2k, could you please clarify your statement

The ADMT leaves a lot of work to do.

I've used ADMT successfully and not had to touch a single PC. To what are you referring? ADMT can bu used to migrate both Users and Computers. You can preserve SID history and can even migrate user passwords. Once a workstation has been migrated, the users profile will work in both the old and new domain.

I hope you find this post helpful.

Regards,

Mark

 

[djtech2k]

I have known many people to use ADMT and they had to hand script many things. Some of the biggest issues I have heard were resources on workstations. The Quest tool updates every object on every machine for each user sid that has been migrated. My experience with DMW has been great. I think some of the newer iterations of ADMT are better, but I have not even looked at it in a while. I just know DMW works great and I have heard many horror stories about ADMT and I witnessed them early on in ADMT.

 

[markdmac]

Fair enough, but I think the horror stories tend to be the result of people just running the tool without reading the extensive documentation on it.

A quick search on support.microsoft.com will provide all the information needed to use the tool successfully. And since ADMT is free and has a "practice" mode, I think it is worth the effort before spending money on a third party tool.

I hope you find this post helpful.

Regards,

Mark

 

[djtech2k]

Agreed that considering a free tool is a good choice. I am just always cautious since you usually get what you pay for in the end.