active directory migration tool from 2003 to 2008
TRANSCRIPT
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 1/23
Active Directory Migration tool “ADMT 3.1” is the latest version that can be run on
Windows 2008.
This task will demonstrate with snap shots the process of setting up the ADMT,
configuring user’s migrations, setting password export server on the source
domain, migrating users’ passwordsand SID history.
First step: installing ADMT 3.1 on Windows 2008 Domain
Controller
installing ADMT
ADMT installation file can be downloaded from
http://www.microsoft.com/downloads/details.aspx?FamilyID=ae279d01-7dca-413c-a9d2-
b42dfb746059&displaylang=en
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 2/23
During installation the installation Wizard will ask about the database to be used by ADMT, the
wizard can use existing SQL 2005 instance or it can install a new instance of SQL 2005 express, in our
case we choose to install a new SQL 2005 instance.
Then, the wizard will prompt us if we need to import data from any previous
ADMT database, since this is a new installation we choose not o import any data.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 3/23
Importing previous ADMT data
Then the installation Wizard completes successfully.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 4/23
Second Step: Installing Password Export Server
In order to be able to export the user’s passwords, we needto install the
password export server.
The password export server will need a password encryption file to secure password
migration, to create this password encryption file we use the ADMT utility in the
command line to generate the file as follows:
1- We navigate to the location of the installation of the ADMT, in our case it is
C:\Windows\ADMT
2- We issue the following command C:\Windows\ADMT>admt key /opt:create
/sd:”Source_Domain” /kf:c:\Domain.pes /PWD *
3- The utility will then ask you to provide the password and validate it.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 5/23
After creating the encryption file we move it the source domain controller where we
are going to install and use the password export server as in the following steps:
1-Start the installation wizard
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 6/23
2- Accept the license agreement
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 7/23
Accept License agreement
3- Choose the password encryption key file that we created in the previous steps 4-
Insert the password that we used to
encrypt the password encryption file
Password Prompt
5- Start installing the Password Export Server
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 8/23
6- Choose the service account that the PES server will run under , this account
should be administrator on the
destinationdomain, we chose the administrator in the source domain and made it
a member of the administrators group in
the Windows 2008 domain
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 9/23
Up to this stage the installation is finished, the wizard will require the source
server to be restarted, after restarting the
server, the PES server has to be started manually.
Third: running the ADMT Migration wizard
To start the migration wizard, we go to the ADMT console on the destination
domain controller, “Windows 2008 DC” and
start the user’s migration Wizard.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 10/23
Start ADMT Users Migration
Choose next to the welcome screen
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 11/23
Start Migration
Choose the source Domain and domain controller, and the destination domain
and domain controller. In our case the
source domain is “radmins.com” and the source domain controller is
“RDC01radmins.com”,the destination domain
is“nwtraders.com“
and the destination domain controller is “dc01.nwtraders.com”.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 12/23
Then we choose to select the users from the domain directly and not from a file:
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 13/23
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 14/23
Selecting Users to Be migrated
After selecting the user accounts to be migrated, we choose to migrate the
passwords of the users as well and choose the
password export server on that we installed on the source domain controller.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 15/23
Password Migration
Then we choose the target OU to which we will migrate the users to:
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 16/23
Then we choose the state of the migrated users, we can select that the users will
be enabled, disabled, or the same state of
the source domain, also we can select to migrate the source SID of the users,
this will allow users to access the resources
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 17/23
that they used to access in the source domain.
Migrated users state and SID migration
When choosing to migrate the users SIDs, the wizard will prompt to enable
auditing and creating a group necessary for
migration of users SIDs, by selecting “yes” the wizard will enable these settings
on the source domain controller
automatically ad we can proceed.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 18/23
Enabling Auditing
The wizard then will prompt for a user account with proper privilege to add SID history.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 19/23
Administrative Account
The wizard then will prompt for options like migrating users roaming profiles,
update user’s rights, migrating associated groups, and fix users group
memberships.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 20/23
Migration Options
Then the wizard gives us an option to exclude some users from migrations:
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 21/23
Users Exclusion
Then we can choose how to handle conflicts when they occur
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 22/23
Dealing with users conflict
And finally the migration wizard will start migrating users.
8/2/2019 Active Directory Migration Tool From 2003 to 2008
http://slidepdf.com/reader/full/active-directory-migration-tool-from-2003-to-2008 23/23
Start Migration Process