How to Migrate Local User & Group Account to another Server

[Alan Tang]

Hello:

Would you mind to kindly let me know how can I migrate the local
user account from Win2K Server to Win2K3 local user & Group?

Thanks!

 

[Roger Abell [MVP]]

I think the answer is that you cannot.
You will need new groups, new users, and new memberships
between them on the move-to target W2k3
However, you can use tools to take some of the state (files
and perferences) from the old accounts and import them into
the new. Once that comes to mind is the user state migration
tool (usmt) from Microsoft. This has been updated so you
should look into the deploy.cab in the deployment tools for
XP SP2.

 

[Alan Tang]

Thanks for your information. I need to migrate the local user to the new
server because the existing server have file permission, Owner & Audit
policy with Local Account. So, I need to transfer the existing user to
the new server. Does any 3rd Party tools that can have this function?

Thanks!

 

[Roger Abell [MVP]]

The reason you give for the need does not make sense to me.
I do not know about third-party tools, I just script it up if/when needed.

What are you trying to accomplish? I mean, what is it that you
think would be migrated ??

 

[Alan Tang]

Hello:

Sorry for my English was not enough. I have the following case.

I have One Windows 2000 File Server (Domain Member).
Most of them are local account & the permission/owner/audit are grant to
the local user account or Local group.

Now, the server need migrate to another new Windows W2K3 Domain Member
Server. I need to pick-up this jobs to make sure the permission, owner,
audit, user & group are same as before.

So, I would like to study does any methods that it can smooth perform
the migration.
Does any hints?

Thanks a lot!

 

[Roger Abell [MVP]]

OK, got your meaning now.
You want to define users local on the new server, but you also
want to build the storage and its permissions as it was on the
old server. At first I took you to mean migrate the users, so that
is how I responded about the USMT tool from deploy tool (that
does help make users new accounts on new server seem like the
ones they had on old server).
To move the other storage there really is no easy short way since
there are local accounts in use. The local accounts and groups
are for one machine only. So, similar must be defined on the new
server, following a "map" of what was on the old server.
But in doing this it must get translated from old accounts and
groups to the new ones if these are named differently.
I do not know of a free tool I would recommend that does the
mapping and then can turn about and use that to build the new
structure. If everything was with domain users and groups then
it would be simple - just map drive and do xcopy.
You could use tools like dumpsec (google it) to read what does
now exist, and then use a batch of cacls commands to permission
the new using the new groups based on what dumpsec shows you.
There are commercial products that can do similar for a price.