24 December, 2010

Prerequisite of AD Migration {ADMT 3.0}

Before Starting AD Migration !!!

Check the health of Source Domain


Check the health of the Destination Domain



Make sure that the source domain is able to contact the destination domain (connectivity)


Make sure that the destination domain is able to contact the source domain (connectivity)


Load a secondary zone for destination domain on the source domain (You can use other ways as well for name resolution)


Load a secondary zone for source domain on the destination domain (You can use other ways as well for name resolution)


Make sure that we have connectivity from both the domain for the client machine that we want to migrate



Download the ADMT 3.0 Setup
http://www.microsoft.com/downloads/en/details.aspx?familyid=6f86937b-533a-466d-a8e8-aff85ad3d212&displaylang=en


We need to install the ADMT 3.0 Tool on the destination domain`s domain controller logged in as the administrator of the source domain

Also, in case we want to do password migration as well, then we need to install the ADMT 3.0 tool on the source domain`s domain controller



The tool will install a SQL database by default. But in case you have a existing SQL database, then you can use that even





We need an account which should have administrative access to both the domains (source and destination)

For this lab, I have made the administrator of the source domain a member of administrators group of the destination domain and vice versa







On the source domain, create a user/group and a service account



On the client machine, log on as an administrator and start few services with that service account

Note: A service account is nothing but a User Account + SPN Registered for that Service in the User Account. For this lab, we have just created the user account and have not registered any SPN. In case you are unable to start the service on the client machine after changing the log on type of that service to the service account, then keep that as it is as this will require a SPN which we have not registered.




On the client machine, log on as the user which we have created earlier in AD and change the wallpaper, create some files/folders on the desktop and then log off. This will create his profile which we will see later, will migrate



On the destination domain`s domain controller, log on as the administrator of the source domain and start the Service Account Migration Wizard





Oops... We got an Error...

We need to have the destination domain in the "Native Mode" for ADMT 3.0 to Run