24 December, 2010

AD Migration Process {ADMT 3.0}

The Complete ADMT 3.0 Process

Ingredient

Two domains
Trust between the 2 domains
Users / Service Accounts / Groups / Computer (Member Sever) in Source Domain
Local Profile of those users on the Member Server
Run some services on the Member Server with the service account

What Is?

Source_domain$$$
Creates a local group, source_domain$$$, in the source domain, which is used to audit SID history operations
Created auto by the tool (ADMT 3.0)

TcpipClientSupport
Enables TCP/IP client support on the source domain primary domain controller (PDC)
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
Enables remote procedure calls (RPCs) over the TCP transport
No need to create the key in Win 2003

Auditing
Audit account management : Success and Failure
Enable both in Source and Destination domain
ADMT Tool will auto enable auditing
Need auditing for SID Migration

Security Transalation
http://www.adshotgyan.com/2010/12/translating-local-user-profiles-admt-30.html

Migration Starts Now!!!

1. Creating Trust
http://www.adshotgyan.com/2010/12/creating-two-way-external-trust.html

2. Enable SID History
http://www.adshotgyan.com/2010/12/sid-history-sid-filtering.html

3.  Disable SID Filtering
http://www.adshotgyan.com/2010/12/sid-history-sid-filtering.html

4. Prerequisite of AD Migration {ADMT 3.0}
http://www.adshotgyan.com/2010/12/prerequisite-of-ad-migration-admt-30_24.html

5. Password Migration
http://www.adshotgyan.com/2010/12/configuring-password-export-server-pes.html

6. Identifying Service Accounts
http://www.adshotgyan.com/2010/12/identifying-service-accounts-admt-30.html

7. Transitioning Service Accounts (Migrate User Accounts which are Service Accounts)
http://www.adshotgyan.com/2010/12/transitioning-service-accounts-admt-30.html

8. Migrating Global Groups
http://www.adshotgyan.com/2010/12/migrating-global-groups-admt-30.html

9. Migrating All User Accounts
http://www.adshotgyan.com/2010/12/migrating-user-accounts-admt-30.html

10. Migrating workstations
http://www.adshotgyan.com/2010/12/migrating-workstations-admt-30.html

11. Translating local user profiles
http://www.adshotgyan.com/2010/12/translating-local-user-profiles-admt-30.html

12. Remigrating user accounts
http://www.adshotgyan.com/2010/12/remigrating-user-accounts-admt-30.html

13. Remigrating All Global Groups
http://www.adshotgyan.com/2010/12/remigrating-all-global-groups-admt-30.html

14. Final Checks
http://www.adshotgyan.com/2010/12/ad-migration-final-checks-admt-30.html