RE: Moving user account from NT to Win2k3


Hello,

Thanks for update!

Actually, based on my experience, it is impossible to accomplish the goals
without trust. We cannot simply expert NT domain accounts and import them
into 2K3 domain without domain trust relationship. The main cause is that
it cannot translate the SIDs security information through this method
even though they could have the same account name but different SIDs.

If there is anything that is unclear, please feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.




--------------------
| Thread-Topic: Moving user account from NT to Win2k3
| thread-index: AcV9ExqJWuE643MKQgibVQBLqQu11Q==
| X-WBNR-Posting-Host: 202.140.234.94
| From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
<WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
<jjq6PZJfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Moving user account from NT to Win2k3
| Date: Wed, 29 Jun 2005 18:29:05 -0700
| Lines: 103
| Message-ID: <A32915EB-DBAD-48D8-98B9-31348CD3EA65@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.migration
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:10994
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| Hello Jason,
|
| Thank you for your suggestion. However, ADMT cannot be used in my case,
bcs
| there is no trust relationship i can build for the security reason. Any
other
| suggestion you can give? Can I export all accouts in NT4 and then import
them
| back in Win2k3? Thanks!
|
| "Jason Tan (MSFT)" wrote:
|
| > Hello,
| >
| > Thanks for posting!
| >
| > I understand that you want to migrate all user accounts from Windows NT
| > Domain to Windows 2K3 Domain. If I have misunderstood your concerns,
please
| > feel free to let me know.
| >
| > Actually, ADMT can definitely accomplish your goal. You may establish
| > relationship gracefully between the Windows NT domain and Windows 2k3
| > domain. And you may run ADMT on the target domain controller (Windows
2k3
| > DC).
| >
| > More information for your reference:
| > How to establish trusts with a Windows NT-based domain in Windows
Server
| > 2003
| > http://support.microsoft.com/default.aspx?scid=kb;en-us;325874
| >
| > Active Directory Migration Tool Overview
| >
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt.
| > asp
| >
| > Migrating from Windows NT Server 4.0 to Windows Server 2003
| >
http://www.microsoft.com/downloads/details.aspx?FamilyID=e92cf6a0-76f0-4e25-
| > 8de0-19544062a6e6&DisplayLang=en
| >
| > Download Active Directory Migration Tool v.2.0
| >
http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-
| > 9817-8c9773c25c6c&DisplayLang=%20en
| >
| > 832221 How to configure the Active Directory Migration Tool to migrate
user
| > passwords from a Windows NT 4.0 domain to a Windows Server 2003 domain
| > http://support.microsoft.com/?id=832221
| >
| > Hope the information helps. If there is anything that is unclear,
please
| > feel free to let me know.
| >
| > Thanks & Regards,
| >
| > Jason Tan
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| >
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| >
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Moving user account from NT to Win2k3
| > | thread-index: AcV8gI2z03bLMhejT+i0+8N6yxZn/A==
| > | X-WBNR-Posting-Host: 202.140.234.94
| > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
| > <WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | Subject: Moving user account from NT to Win2k3
| > | Date: Wed, 29 Jun 2005 01:00:02 -0700
| > | Lines: 4
| > | Message-ID: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.migration
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl
| > microsoft.public.windows.server.migration:10969
| > | X-Tomcat-NG: microsoft.public.windows.server.migration
| > |
| > | Hello, my office is upgrading the OS from NT to Win2k3. But the pint
is
| > ADMT
| > | cannot be used. I need to move all user account to the new domain and
all
| > the
| > | user accounts object have retain the same as in NT 4. Is there any
way I
| > can
| > | export them out and then import them to Win2k3 server? Thanks!!
| > |
| >
| >
|

.

Relevant Pages

  • Re: Cannot connect to the Internet
    ... My Windows 2000 pro PC is connected to the internet (Local Area ... Connection 2 Status icon shows "Connected" with a speed of 10.0 ... Posted via a free Usenet account from http://www.teranews.com ... user account which is interfering with the PC. ...
    (microsoft.public.mac.virtualpc)
  • Re: Windows Passwords
    ... "Windows Vista for Dummies" manual. ... I started by creating a test user account. ... The reason I say this is that, when I turned the Guest ...
    (microsoft.public.windows.vista.general)
  • Re: WELCOME SCREEN LOGON
    ... In God We Trust ... before Windows starts. ... You can leave the password box blank if the account does ...
    (microsoft.public.windowsxp.newusers)
  • [NT] Blank Administrator Password on OEM Windows XP Installation
    ... The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com ... Use of this account will allow anyone with physical ... * DELL Laptops with pre installed Microsoft Windows XP Professional SP2 ... is prompted to create a regular user account for general use. ...
    (Securiteam)
  • Re: WELCOME SCREEN LOGON Update Update
    ... In God We Trust ... before Windows starts. ... You can leave the password box blank if the account does ...
    (microsoft.public.windowsxp.newusers)
Loading