Migration Question

[Guest]

We are performing a paralell migration from a single NT domain with a few
hundred users to a pristine 2000 AD environment, however the AD domain will
remain in mixed mode during the staged migration to provide backout to the
old domain.

All our file servers in each site are windows2000 member servers in the NT
domain with shared folders and permissions. If we migrate the groups from the
NT domain to the AD domain thenjoin the wk2 member server to the AD domain
what happens to the folder permissions, will they still reference the NT
groups? does that mean re-permissioning the folders?

thanks

 

[Chriss3 [MVP]]

If you are using ADMTv2, (Active Directory Migration) tool, you can migrate
the member servers as well over the Active Directory domain, without need to
unjoin them and re-join them manually. ADMTv2 dose also provide a Security
Translation Wizard that will translate the SIDs. So the permission will
point to the correct security principal (user,group,computer)

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Guest]

thanks for the reply but does the admt toolv2 tool not require the target
domain to be in native mode as the original admt did?

I thought the sid history attribute (assuming that is how it provides access
to the oringional resources) was only available in native mode domains?

thanks again

 

[Chriss3 [MVP]]

Yes the destination, or target have to be in native mode to use SID History.
Is that a problem? do you have down level replication to NT4.0 BDCs?

--
Regards
Christoffer Andersson
Microsoft MVP - Directory Services

No email replies please - reply in the newsgroup

 

[Guest]

The migration tool(Domain Migration Wizard) from Aelita (now Quest) can
migrate with sid history in mixed mode.

wm.quest.com