Thursday, May 20, 2010

Home /$profile /Active Directory /Active Directory Migration /AD /ADMT /ADMT 3.2 /ADPREP /Microsoft /Migration /NetIQ /QMM /Quest Migration Manager / Computer Migration – Things to Consider

Computer Migration – Things to Consider

9 comments

Here are a few points which you can consider while doing computer migration.  These points are applicable to all migrations irrespective of the migration tool (ADMT, NetIQ, Quest etc). 

Here is a high level flow chart that describes the computer migration process:

San-Article

Admin$ Access (PreMig1 Script) – Ensure that you can access Admin$ or C$ on the workstation using your migration service account.  You can use the following script to test the Admin$ permission:

http://portal.sivarajan.com/2010/01/check-admin-share-using-poweshell.html

Ping (part of PreMig1 Script)– Make sure you can ping the workstation from the migration console/server.  But keep in mind that, if ICMP is disabled on your network, you won’t be able to ping the workstation.  Also, I have seen in many cases that Ping is resolving to an incorrect IP address,  which can be due to a bad WINS server or bad name resolution.

Read more at: http://www.sivarajan.com/cm.html

Other Related Blogs/Articles:

User Account Migration and Merging Using ADMT - http://www.sivarajan.com/

Active Directory Migration Using ADMT - http://www.sivarajan.com/admt.html

Computer Migration - Things to Consider - http://www.sivarajan.com/cm.html

Filed under
Share X LinkedIn Facebook Email
SS

Santhosh Sivarajan

Microsoft MVP · Identity & Cybersecurity Architect

Santhosh has 30+ years of hands-on enterprise experience in Identity and Access Management, Microsoft Entra ID, Active Directory, Microsoft 365 and Zero Trust architecture. He is the author of two books on Windows Server and security, and leads consulting, assessments and training at SAG Business Group.

SAG Business Group LinkedIn Publications Work with Santhosh

9 comments:

Hi
I will be soon doing a inter-forest migration(win 2003 AD to win 2008 R2 AD). I came across your blog and have a question on your re-acl? When you say Re-acl do you mean run the security translation wizard on the migrated computer?

If you are using ADMT, it is called Security Translation. It is basically changing (add or replace) the source account information with target account information.

You can see step by step procedure in my following article:
http://www.sivarajan.com/admt.html

Ok, this is the situation. We are migrating users using admt 3.2 with sid history. The desktops are being upgraded to windows 7 and joined to the new domain and their profiles migrated using USMT with MDOP. So should I now run the security translation after the workstaions have been migrated? What purpose does it serve? I referred your admt.html but need more answers. Thanks for your time

If you are “migrating” workstation profile using USMT, you don’t need to perform another “migration”. Again, it depends on your USMT migration. I can’t answer your question without knowing your USMT migration details. Security Translation is different than the actual migration. Security Translation add/replaces the permission on the workstation.

Thanks for your response, another question: Would I have to run security translation on servers in the source domain that users connect to soon after I migrate their accounts? The ADMT guide from MS does not mention this except during post-migration when the servers have been migrated.

soon after I migrate their accounts? – If you are using SidHisotry, No you don’t need to perform security transfer immediately after the user migration. SidHisory should take care of this. I would recommend performing Security Translation before you migrate this server.

Quickbooks File Doctor is your one-stop solution for all accounting errors that Quickbooks user face, know more about this errors and how you can fix them

Post a Comment

Popular Posts
Workstation Trust Relationship Issue Issue: You receive the following error message, when you try to login to the domain.  The security database on the server does not have ... ADMT Service Account - Permission and Configuration The ADMT service account needs to have proper permission in source and target domains.  You don’t need to use 2 separate accounts.  You can ... My First Peek into Microsoft Exchange 2010 By Santhosh Sivarajan Before I really dive into Exchange 2010, I thought I would install and play with it first. I took some screen shots and notes during the ins... ObjectSID and Active Directory What is an objectSID in Active Directory? When a new object is created in Active Directory, Domain Controller assigns a unique value used ... AD Group Report - List Group Members in Active Directory–PowerShell Script Updated Script - http://portal.sivarajan.com/2011/10/search-ad-collect-local-admin-group.html Script #1 This script... Add Users to a Group–PowerShell Script Purpose – Add users to a group from an input file – PowerShell V2 Script.  Input file – Input file (Users.csv) contains samAccountName in... User Account Migration and Merging – Part I (ADMT) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM pre-creating user account ... User Account Migration and Merging – Part II (Quest Migration Manager) Part I - User Account Migration and Merging Using ADMT Part II - User Account Migration and Merging Using QMM Pre-creating user account in... Delete Stale or Inactive Computer Accounts from Active Directory Here is an easy way to identify and delete inactive or stale computers in an Active Directory environment.  Using the dsquery command you c... Converting PowerShell (PS1) to EXE / Standalone Application As we know, there many applications available to convert a PowerShell file to a standalone executable file.  Based on my experience, PowerSh...