RE: Not all group memberships are migrated

From: Rebecca Chen [MSFT] (v-rebc_at_online.microsoft.com)
Date: 01/10/05 

Date: Mon, 10 Jan 2005 12:03:26 GMT

Hi Peter,

Thanks for the great experience sharing!

Generally speaking, we recommned you not to migrate members when you
migrate group. The migraiton sequence goes like this:

Universal groups
Global groups
Domain Local groups
User accounts
Computer objects

Each group type has different rules for membership and serves a different
purpose. This affects the order that the groups are migrated from the
source to the target domains. Universal groups can contain members from any
domain in the forest and replicate group membership to the global catalog.
For this reason, they can be used for administrative groups. When you
restructure domains, it is recommended to migrate universal groups first.

In addition, I would like to suggest that you migrate the groups and users
separately (do not migrate the associated members when migrating groups).

During the group migration, please use the following configurations

[Group Options]

Copy group members * Not Checked
Fix membership of group * Checked

During the user migration, please use the following configurations:

[User Options]

Migrate associated user groups * Not Checked
Fix users' group memberships * Checked

If the groups have previously been migrated, choosing the above options
will update the group memberships during the user migration.

Any update, let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

Relevant Pages

  • RE: ADMT Error 7585: Access Denied when migrating users with group
    ... DNS servers, and the old DNS servers hold secondary copies of the new zones. ... It was a touch bizarre that the group migration did actually work, ... Migrate members: Yes ... Section will be available once object migration is complete. ...
    (microsoft.public.windows.server.migration)
  • RE: ADMT Error 7585: Access Denied when migrating users with groups
    ... conjunction with the "replace existing" being enabled in the migration ... wizard first. ... Migrate members: Yes ... Section will be available once object migration is complete. ...
    (microsoft.public.windows.server.migration)
  • Re: Group migration using ADMT
    ... the only thing showing up in Group members is Domain ... > The migration should be matching up users into Groups. ... > Also, just FYI, I am not getting any error messages in the ADMT log. ...
    (microsoft.public.windows.server.general)
  • Users and Groups Migration
    ... I have like 30 users which are members of 10 different groups. ... If I select copy user option then Do I need to run the User migration wizard ... First group migration or Users or both at same time ...
    (microsoft.public.windows.server.migration)
  • Re: Child Domain access
    ... Group Scope ... -- Domain Local groups can contain members from ANY domain but can only be ... -- Global groups can only contain members from their OWN domain but can be ... domain and can be a member of domain local or universal groups in any ...
    (microsoft.public.windows.server.active_directory)