Migrating the Computers

Not all computers can be migrated to a new domain—specifically, you cannot migrate domain controllers to a new domain. To move Windows NT domain controllers to a new Windows Server 2003 domain, the domain controllers must be upgraded to Windows Server 2003 and must join the new domain during the upgrade process. Windows 2000 domain controllers can be demoted from their domain controller mode to the status of member servers, and then you can use the Dcpromo utility to promote them to the status of domain controller and to join the new domain during that process.

Moving workstations and member servers to the destination domain automatically moves most of their information with them. The local Security Account Manager (SAM) databases (containing local user and group accounts) on member servers and client workstations are moved with the computer account during the migration process. Yet computer descriptions are not migrated from Windows NT workstations and member servers because that information isn't part of the SAM database. Whereas, with migrated Windows 2000 servers and workstations, computer descriptions are migrated with the computer accounts.

Running the Computer Migration Wizard

To migrate computer accounts, run the Computer Migration Wizard on the Action menu in ADMT. The security information (SIDs in the ACLs and secure ACLs) on accounts and objects in the same domain as the computer are migrated as part of the computer migration. Yet accounts (or objects) not part of the same domain as the computer will not have security information migrated.

The Computer Migration Wizard shares many dialog boxes in common with the Group Account Migration Wizard; therefore, only the dialog boxes unique to the Computer Migration Wizard are shown in this section. Refer to the section entitled "Migrating Group Accounts" earlier in this chapter to see the remaining dialog boxes.

To run the Computer Migration Wizard to migrate computer accounts, complete the following steps:

  1. Choose to test or migrate When the Computer Migration Wizard starts, choose to test the computer account migration or to migrate the actual computer accounts by selecting either the Test The Migration Settings And Migrate Later option or the Migrate Now option. Testing the computer account migration enables you to identify and correct errors before an actual migration.

  2. Pick the domains Next you must select or supply the source and destination domain names, which can be provided either as DNS or NetBIOS names (except for the forest root, which requires the DNS name).

  3. Choose the computers The Computer Selection dialog box next prompts you to select the computers to migrate. To include the computers in the migration list, click Add, click Advanced, click Find Now, and then select the computers from the displayed list.

    Note

    You cannot migrate domain controllers by using this wizard. To move a Windows NT domain controller to a new Windows Server 2003 domain, the domain controllers must be upgraded to Windows Server 2003 and must be joined to the new domain during the upgrade process. Windows 2000 domain controllers can be demoted from their domain controller mode to the status of member servers, then can be promoted to the status of domain controller by using Dcpromo, and finally can be joined to the new domain during that process.

  4. Select the target OU You must next select the OU to which the computer accounts are to be migrated.

  5. Choose objects to translate The Translate Objects dialog box, as shown in the following screen, allows you to select the objects on the source computer for which you want to migrate the security settings. That is, it translates the ACLs on the selected objects to corresponding ACLs on the computer in the destination domain. These objects include files and folders, printers, shares, local groups, and the registry, as well as user profiles and user rights. No objects are selected by default (thus, you can opt to migrate the computer without migrating any of the related security settings).

    image with no caption
  6. Select computer options The options in the Computer Options dialog box, as shown in the following screen, specify how the computer is handled postmigration, including how long it waits before it reboots and how it performs the renaming of the computer (if at all).

    image with no caption
  7. Exclude object properties When migrating a Windows 2000 or Windows Server 2003 computer, you can choose to exclude properties of computer objects during migration. By default, all computer object properties are included.

  8. Handling naming conflicts In the event of a conflict with computer names in the destination domain, you can specify how you want the Computer Migration Wizard to deal with it. By default, the Replace Conflicting Accounts option is selected, which provides two options: You can select Remove Existing User Rights, to remove rights assigned in the destination domain that don't exist in the source domain, or Move Replaced Accounts To Specified Target Organizational Unit, which overwrites accounts in the destination domain with account data from the source domain.

    Alternatively, you can select the Rename Conflicting Accounts By Adding The Following option to rename the computer accounts by adding a prefix or suffix to the account name.

The summary of the migration information is displayed. Verify the computer migration is configured correctly before clicking Finish to complete the wizard. If you are running in Test mode, verify that the line Changes Will Not Be Written is present, which indicates that this migration is running in Test mode and will not actually perform the requested changes.

..................Content has been hidden....................

You can't read the all page of ebook, please click here login for view all page.
Reset