Re: "the dsa object cannot be deleted"

"wyocowboy" <wyocowboy@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:8EF91445-B0CD-418D-B4DF-6710AC8E3710@xxxxxxxxxxxxxxxx
Ah, good job, cowboy! Glad you found it.

Yeah well, I felt pretty stoopid when I found the error of my ways...

Don't worry. Happens to the best of us!!


I really think a new domain at this point is your best bet. ADMT will migrate users, groups and computers. Just make sure everyone's logged off, but not shutdown when you do the computers. Use Robocopy GUI to move files to preserve their permissions. Don't worry about Exchange.


Since I've never done that before, a couple questions:

1) does the tool change the domain membership on the machines, or does that
still happen manually?

Automatically. Using the SIDHistory option, and the security translator option, the users will be able to logon to the new domain using their old profiles.


2) after running admt (v3?) are the active user profile settings on the
machines preserved? For example, since we are using Outlook in pop3 mode, the
.pst files are on each machine, in the \docs & settings\user\local
settings\app data\ms\outlook folder. It's been my experience that a new user
profile gets created when jumping between domain and workgroup or between
domains.

Version 3.1.
See above.



3) does admt migrate all of this in a non-destructive way? In other words,
if I assigned the new server to a new domain, but something went wrong, could
users still get back onto the old server?

Yep. Cool tool. Test it on one machine, YOURS.



I'm still a little leery about doing this in a 'last server standing'
situation, so I might throw together a win2k server using the CD from the
dead one. Assuming that I do that before extending the schema and that going
from win2k - win2k is not that different from win2k - win2k3 it might
increase my comfort level.

Migrating user accounts is a 'copy' so you can do it over and over again by deleting the migrated users in the new domain, and do it again. However, migrating the computer account is a one shot deal, which is why I suggested to test it on your machine.

Here is some reading for ya:

---

ADMT to migrate into a new forest/domain:

For 2003:
ADMT v3 Migration Guide
http://www.microsoft.com/downloads/details.aspx?familyid=D99EF770-3BBB-4B9E-A8BC-01E9F7EF7342&displaylang=en

Active Directory Migration Tool v3.0
http://www.microsoft.com/downloads/details.aspx?familyid=6F86937B-533A-466D-A8E8-AFF85AD3D212&displaylang=en

For 2008:

ADMT v3.1 Guide: Migrating and Restructuring Active Directory Domains
http://www.microsoft.com/downloads/details.aspx?familyid=6D710919-1BA5-41CA-B2F3-C11BCB4857AF&displaylang=en

Active Directory Migration Tool version 3.1
http://www.microsoft.com/downloads/details.aspx?familyid=AE279D01-7DCA-413C-A9D2-B42DFB746059&displaylang=en

Password Export Server version 3.1 (x86)
http://www.microsoft.com/downloads/details.aspx?familyid=F0D03C3C-4757-40FD-8306-68079BA9C773&displaylang=en

Password Export Server version 3.1 (x64)
http://www.microsoft.com/downloads/details.aspx?familyid=5B4E5C61-1C00-4DA7-9C0D-130200AED21A&displaylang=en

Domain Migration Cookbook - Index and Cover:
http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/cookbook/cookintr.mspx
======================================================================================================
======================================================================================================

Ace



.

Relevant Pages

  • RE: Migrating Workstations from NT4 domain to win 2003
    ... I think that using the Active Directory Migration Tool (ADMT) should be the ... Active Directory Migration Tool Overview ... I know how to move the workstations from the NT domain to the ...
    (microsoft.public.windows.server.migration)
  • RE: Migrate from NT4 to Server 2003
    ... The new machine has 2003 Server pre-installed and activated. ... I believe that your suggested method of new Domain, ADMT and then rename is ... The Active Directory service imports the existing ... > Windows 2000 Active Directory Migration Tool ...
    (microsoft.public.windows.server.migration)
  • Re: New Company New Domain
    ... domain) however if the target-domain runs in Windows 2000 native or Windows ... Server 2003 mode ADMT will copy the SID in the SID-History Attribute which will ... Active Directory Migration Tool Overview ...
    (microsoft.public.windows.server.active_directory)
  • RE: Server Migration using ADMT
    ... there is not known issue using ADMT migrate serers. ... Active Directory Migration Tool Overview ... Migrating from Windows NT Server 4.0 to Windows Server 2003 Plan ...
    (microsoft.public.windows.server.migration)
  • Re: Best strategry when 2 NT domains are involved
    ... I like the clean upgrade using ADMT ... > and use ADMT to migrate user from NT domain to win2k3. ... > Windows 2000 Active Directory Migration Tool ...
    (microsoft.public.windows.server.migration)