RE: Moving user account from NT to Win2k3


Hi Wilson,

Maybe I have not described the case clearly. As I mentioned as my previous
post, we cannot use the export/import method to migration. Therefore,
without trust relationship release, as I know, there has no such tools can
migrate AD users account besides ADMT. So, I am afraid that to release the
right or "trust" to NT4 temporarily and accomplish the goal of user
migration is an appreciate choice in your scenario.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



--------------------
| Thread-Topic: Moving user account from NT to Win2k3
| thread-index: AcV9KmyrtRBYQjE9QFO6m6LZTr/xwQ==
| X-WBNR-Posting-Host: 202.140.234.94
| From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
<WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
| References: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
<jjq6PZJfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
<A32915EB-DBAD-48D8-98B9-31348CD3EA65@xxxxxxxxxxxxx>
<OMKgU5RfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
| Subject: RE: Moving user account from NT to Win2k3
| Date: Wed, 29 Jun 2005 21:16:01 -0700
| Lines: 195
| Message-ID: <C54101DE-F7F1-44F5-9CE7-CFD236E37CA5@xxxxxxxxxxxxx>
| MIME-Version: 1.0
| Content-Type: text/plain;
| charset="Utf-8"
| Content-Transfer-Encoding: 7bit
| X-Newsreader: Microsoft CDO for Windows 2000
| Content-Class: urn:content-classes:message
| Importance: normal
| Priority: normal
| X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| Newsgroups: microsoft.public.windows.server.migration
| NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
| Xref: TK2MSFTNGXA01.phx.gbl
microsoft.public.windows.server.migration:11002
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| Hello,
|
| I am sorry that I confuse you. The fact is there is a trust between NT4
and
| Win2k3. But for the security reason, Win2k3 doesn't release the right or
| "trust" to NT4, therefore AMDT cannot be used to transfer user account
from
| NT4 to Win2k3. Besides ADMT, what tools can I use to transfer all user
| account from NT4 to Win2k3? Since there are around 800 -1000 users in the
| organization, it is tough to create the account manually. Thanks Jason!
|
| Wilson
|
|
| "Jason Tan (MSFT)" wrote:
|
| >
| > Hello,
| >
| > Thanks for update!
| >
| > Actually, based on my experience, it is impossible to accomplish the
goals
| > without trust. We cannot simply expert NT domain accounts and import
them
| > into 2K3 domain without domain trust relationship. The main cause is
that
| > it cannot translate the SIDs security information through this method
| > even though they could have the same account name but different SIDs.
| >
| > If there is anything that is unclear, please feel free to let me know.
| >
| > Thanks & Regards,
| >
| > Jason Tan
| >
| > Microsoft Online Partner Support
| > Get Secure! - www.microsoft.com/security
| >
| > =====================================================
| >
| > When responding to posts, please "Reply to Group" via your newsreader
so
| > that others may learn and benefit from your issue.
| >
| > =====================================================
| > This posting is provided "AS IS" with no warranties, and confers no
rights.
| >
| >
| >
| >
| > --------------------
| > | Thread-Topic: Moving user account from NT to Win2k3
| > | thread-index: AcV9ExqJWuE643MKQgibVQBLqQu11Q==
| > | X-WBNR-Posting-Host: 202.140.234.94
| > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
| > <WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | References: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
| > <jjq6PZJfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
| > | Subject: RE: Moving user account from NT to Win2k3
| > | Date: Wed, 29 Jun 2005 18:29:05 -0700
| > | Lines: 103
| > | Message-ID: <A32915EB-DBAD-48D8-98B9-31348CD3EA65@xxxxxxxxxxxxx>
| > | MIME-Version: 1.0
| > | Content-Type: text/plain;
| > | charset="Utf-8"
| > | Content-Transfer-Encoding: 7bit
| > | X-Newsreader: Microsoft CDO for Windows 2000
| > | Content-Class: urn:content-classes:message
| > | Importance: normal
| > | Priority: normal
| > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | Newsgroups: microsoft.public.windows.server.migration
| > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | Xref: TK2MSFTNGXA01.phx.gbl
| > microsoft.public.windows.server.migration:10994
| > | X-Tomcat-NG: microsoft.public.windows.server.migration
| > |
| > | Hello Jason,
| > |
| > | Thank you for your suggestion. However, ADMT cannot be used in my
case,
| > bcs
| > | there is no trust relationship i can build for the security reason.
Any
| > other
| > | suggestion you can give? Can I export all accouts in NT4 and then
import
| > them
| > | back in Win2k3? Thanks!
| > |
| > | "Jason Tan (MSFT)" wrote:
| > |
| > | > Hello,
| > | >
| > | > Thanks for posting!
| > | >
| > | > I understand that you want to migrate all user accounts from
Windows NT
| > | > Domain to Windows 2K3 Domain. If I have misunderstood your
concerns,
| > please
| > | > feel free to let me know.
| > | >
| > | > Actually, ADMT can definitely accomplish your goal. You may
establish
| > | > relationship gracefully between the Windows NT domain and Windows
2k3
| > | > domain. And you may run ADMT on the target domain controller
(Windows
| > 2k3
| > | > DC).
| > | >
| > | > More information for your reference:
| > | > How to establish trusts with a Windows NT-based domain in Windows
| > Server
| > | > 2003
| > | > http://support.microsoft.com/default.aspx?scid=kb;en-us;325874
| > | >
| > | > Active Directory Migration Tool Overview
| > | >
| >
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt.
| > | > asp
| > | >
| > | > Migrating from Windows NT Server 4.0 to Windows Server 2003
| > | >
| >
http://www.microsoft.com/downloads/details.aspx?FamilyID=e92cf6a0-76f0-4e25-
| > | > 8de0-19544062a6e6&DisplayLang=en
| > | >
| > | > Download Active Directory Migration Tool v.2.0
| > | >
| >
http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-
| > | > 9817-8c9773c25c6c&DisplayLang=%20en
| > | >
| > | > 832221 How to configure the Active Directory Migration Tool to
migrate
| > user
| > | > passwords from a Windows NT 4.0 domain to a Windows Server 2003
domain
| > | > http://support.microsoft.com/?id=832221
| > | >
| > | > Hope the information helps. If there is anything that is unclear,
| > please
| > | > feel free to let me know.
| > | >
| > | > Thanks & Regards,
| > | >
| > | > Jason Tan
| > | >
| > | > Microsoft Online Partner Support
| > | > Get Secure! - www.microsoft.com/security
| > | >
| > | > =====================================================
| > | >
| > | > When responding to posts, please "Reply to Group" via your
newsreader
| > so
| > | > that others may learn and benefit from your issue.
| > | >
| > | > =====================================================
| > | > This posting is provided "AS IS" with no warranties, and confers no
| > rights.
| > | >
| > | >
| > | >
| > | >
| > | >
| > | >
| > | >
| > | > --------------------
| > | > | Thread-Topic: Moving user account from NT to Win2k3
| > | > | thread-index: AcV8gI2z03bLMhejT+i0+8N6yxZn/A==
| > | > | X-WBNR-Posting-Host: 202.140.234.94
| > | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
| > | > <WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
| > | > | Subject: Moving user account from NT to Win2k3
| > | > | Date: Wed, 29 Jun 2005 01:00:02 -0700
| > | > | Lines: 4
| > | > | Message-ID: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
| > | > | MIME-Version: 1.0
| > | > | Content-Type: text/plain;
| > | > | charset="Utf-8"
| > | > | Content-Transfer-Encoding: 7bit
| > | > | X-Newsreader: Microsoft CDO for Windows 2000
| > | > | Content-Class: urn:content-classes:message
| > | > | Importance: normal
| > | > | Priority: normal
| > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
| > | > | Newsgroups: microsoft.public.windows.server.migration
| > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
| > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
| > | > | Xref: TK2MSFTNGXA01.phx.gbl
| > | > microsoft.public.windows.server.migration:10969
| > | > | X-Tomcat-NG: microsoft.public.windows.server.migration
| > | > |
| > | > | Hello, my office is upgrading the OS from NT to Win2k3. But the
pint
| > is
| > | > ADMT
| > | > | cannot be used. I need to move all user account to the new domain
and
| > all
| > | > the
| > | > | user accounts object have retain the same as in NT 4. Is there
any
| > way I
| > | > can
| > | > | export them out and then import them to Win2k3 server? Thanks!!
| > | > |
| > | >
| > | >
| > |
| >
| >
|

.

Relevant Pages

  • RE: Moving user account from NT to Win2k3
    ... Win2k3 doesn't release the right or ... "trust" to NT4, therefore AMDT cannot be used to transfer user account from ...
    (microsoft.public.windows.server.migration)
  • RE: 2 way forest trust
    ... password" was received and the logon process failed. ... include the user account you use to logon, ... The main purpose to create forest trust relationship is to allow each ... Microsoft Online Support ...
    (microsoft.public.windows.server.migration)
  • Re: XFER User Account data from old User Acct to Newly created Use
    ... Percy appreciates your help and trust. ... How to copy data from a corrupted user profile to a new profile ... I have a User Account problem and frankly, don't know how to post it to ...
    (microsoft.public.windowsxp.help_and_support)
  • RE: Win2003 server cant browse NT Domain
    ... What is the relationship between your win2k3 machine and NT? ... DC and you are building trust to NT or win2k3 is a member server? ... How to Write an LMHOSTS File for Domain Validation and Other Name ... How To Establish Trusts with a Windows NT-Based Domain in Windows Server ...
    (microsoft.public.windows.server.migration)
  • Re: Trust Issues
    ... One thing is incorrect in the system log on win2k3 DC, ... >Subject: Re: Trust Issues ... >similiar function to block the port. ... >other words, if you share a folder in win2k domain, are you able to select ...
    (microsoft.public.windows.server.general)