Re: Migration from a child domain 2000 to a new 2003 Root Domain

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

Put the Domain Admins of target in the Administrators of
source so that when you log onto Target you will be an admin
of both.

true for migration of users and groups

not true for migrating computers as you need local administrator permissions
on each computers to migrate...

the way to go to migrate users, groups AND computers:
* Still add target domain admins to source administrators
* create a source domain local group (native mode needed at least)
* Still add target domain admins to source domain local group
* Using a GPO that has computers under its scope of management use the
restricted groups options to add the source domain local group to the local
administrators of computers

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Herb Martin" <news@xxxxxxxxxxxxxx> wrote in message
news:eJmIZNjOHHA.1872@xxxxxxxxxxxxxxxxxxxxxxx

"Benedicte Merci" <BenedicteMerci@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in
message news:04B1D667-1AA2-4499-9C2E-CDFDDEBA6EE7@xxxxxxxxxxxxxxxx
Migration from a child domain 2000 to a new 2003 Root Domain
We have to migrate from a child Domain 2000 to a New 2003 Domain.
We will use the ADMT2 and Netdom (for the temporary trust between OLD &
New)

Use ADMTv3 -- more features better control.

I have the following question about de trust!
Do I have to do the bidirectional trust between the 2 roots or Can I
create
it straight from the child to the new Root?

No, and unless you create a Forest Level trust which isn't even
always possible, that wouldn't work anyway.


Create a trust from SOURCE domain to TARGET -- use an
external trust which only works directly between 2 domains.

Put the Domain Admins of target in the Administrators of
source so that when you log onto Target you will be an admin
of both.

If you have some more advices. there are for sure welcome !
Thank You !
Benedicte
PS : Sorry about my English French is my mother Tongue

Your English is (much) better than my French.


--
Herb Martin, MCSE, MVP
http://www.LearnQuick.Com
(phone on web site)



.

Relevant Pages

  • Re: Its official: NO one is protecting your privacy
    ... How about by leaving a new board on privacy and civil liberties ... Computers in Communist China and Russia, and some among them are using ... Government and US Corporations Computers, much of mine was sent to ... could not plan and target them, while they are using the accurate Maps ...
    (alt.politics)
  • Re: Add another domain user group to local administrators of all computers in an OU with removing ot
    ... But if you only work with groups in restricted groups, you can just add/remove user to the group in AD you specified. ... admins group. ... Create the gpo in the ou where the Computers reside, ... "Add another domain user or group to local administrators of all ...
    (microsoft.public.windows.server.active_directory)
  • ERR3:7075 Failed to change domain affiliation
    ... However, migrating computers is ... Every time I test the migration of a computer from the NT ... supposed to log onto the target DC but change the domain ... I can add the target domain administrator to the ...
    (microsoft.public.windows.server.migration)
  • Re: Domain Rights
    ... Ordinary users didn't need local admins ... Create a new OU for computers. ... Delegate permissions create/delete ... Add IT_Techs to local administrators group. ...
    (microsoft.public.windows.server.active_directory)
  • Re: AD Design Question
    ... HR Computers ... Delegate Authority (to junior or local admins) ... Groups are used primarily for granting access to resources. ... of handling outside contacts as well as contacts for our parent company. ...
    (microsoft.public.windows.server.active_directory)