2000 to 2003 Migration - ADMT V.2

• Previous message: MarkH: "Windows 2003 license policy"
• Messages sorted by: [ date ] [ thread ]

Date: Fri, 27 Feb 2004 13:31:58 -0600

All,

I am in the process of migrating groups, users, and machines from a 2000 AD
environment to a 2003 AD environment. Using ADMT, the migration runs
successfully but I am left with two issues:

1. When the user accounts are migrated, including their passwords, the
"User must change password at next logon" flag is set eventhough the
passwords DO meet the complexity requirement in the target domain. Outside
of using a VB script to change this behaviour, is there a way to accomplish
this using ADMT? It just seems to defeat the purpose of migrating the
passwords if the users are forced to change it the first time they log into
the target domain.

2. On one of the domain controllers in the source domain, I have setup
shares and assigned NTFS permissions to the groups and users who will be
migrated to the target domain and map drives from the computers which will
be migrated to those shares. When I do migrate the groups and the users, I
make sure to migrate the SIDs from the source domain are migrated. Using
ADSIEdit, I verify that the SIDHistory attribute for the groups and accounts
that have been migrated are populated in the target domain. The problem is
when I login to the target domain after ADMT has migrated the computer
accounts and I try to access those shares through the mapped drives, I get
"Access Denied". Is there something else that I have to do?

Thanks in advance!

Shahir

• Previous message: MarkH: "Windows 2003 license policy"
• Messages sorted by: [ date ] [ thread ]