RE: Moving user account from NT to Win2k3

Hi Jason,

Here is my case, there is a Win2k3 w/ AD (brand new setup) and NT4 primary
server (PDC). I am trying to move all user account from NT4 to Win2k3.
Fortunately, I got a tool Addusers.exe to do that, I export those user
accounts from NT4 and successfully import them to Win2k3. Cool!

Here is another question, I used xcopy or robocopy to copy all user files
from NT4 to Win2k3. Files access Permission and all attributes are copied
successful too. Unfortunately, those folder with Share permission cannot be
copied. Do you know is there a way to do so? Since there are so many folder
and subfolder among users personal files. If it is impossible, can I export a
list, so that I can know which folders are shared, and then I share those
folder in Win2k3 manually. At least I have a list to follow.

Many thanks!!

"Jason Tan (MSFT)" wrote:

>
> Hi Wilson,
>
> Maybe I have not described the case clearly. As I mentioned as my previous
> post, we cannot use the export/import method to migration. Therefore,
> without trust relationship release, as I know, there has no such tools can
> migrate AD users account besides ADMT. So, I am afraid that to release the
> right or "trust" to NT4 temporarily and accomplish the goal of user
> migration is an appreciate choice in your scenario.
>
> Thanks & Regards,
>
> Jason Tan
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
> --------------------
> | Thread-Topic: Moving user account from NT to Win2k3
> | thread-index: AcV9KmyrtRBYQjE9QFO6m6LZTr/xwQ==
> | X-WBNR-Posting-Host: 202.140.234.94
> | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
> <WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | References: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
> <jjq6PZJfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
> <A32915EB-DBAD-48D8-98B9-31348CD3EA65@xxxxxxxxxxxxx>
> <OMKgU5RfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
> | Subject: RE: Moving user account from NT to Win2k3
> | Date: Wed, 29 Jun 2005 21:16:01 -0700
> | Lines: 195
> | Message-ID: <C54101DE-F7F1-44F5-9CE7-CFD236E37CA5@xxxxxxxxxxxxx>
> | MIME-Version: 1.0
> | Content-Type: text/plain;
> | charset="Utf-8"
> | Content-Transfer-Encoding: 7bit
> | X-Newsreader: Microsoft CDO for Windows 2000
> | Content-Class: urn:content-classes:message
> | Importance: normal
> | Priority: normal
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | Newsgroups: microsoft.public.windows.server.migration
> | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA02.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.migration:11002
> | X-Tomcat-NG: microsoft.public.windows.server.migration
> |
> | Hello,
> |
> | I am sorry that I confuse you. The fact is there is a trust between NT4
> and
> | Win2k3. But for the security reason, Win2k3 doesn't release the right or
> | "trust" to NT4, therefore AMDT cannot be used to transfer user account
> from
> | NT4 to Win2k3. Besides ADMT, what tools can I use to transfer all user
> | account from NT4 to Win2k3? Since there are around 800 -1000 users in the
> | organization, it is tough to create the account manually. Thanks Jason!
> |
> | Wilson
> |
> |
> | "Jason Tan (MSFT)" wrote:
> |
> | >
> | > Hello,
> | >
> | > Thanks for update!
> | >
> | > Actually, based on my experience, it is impossible to accomplish the
> goals
> | > without trust. We cannot simply expert NT domain accounts and import
> them
> | > into 2K3 domain without domain trust relationship. The main cause is
> that
> | > it cannot translate the SIDs security information through this method
> | > even though they could have the same account name but different SIDs.
> | >
> | > If there is anything that is unclear, please feel free to let me know.
> | >
> | > Thanks & Regards,
> | >
> | > Jason Tan
> | >
> | > Microsoft Online Partner Support
> | > Get Secure! - www.microsoft.com/security
> | >
> | > =====================================================
> | >
> | > When responding to posts, please "Reply to Group" via your newsreader
> so
> | > that others may learn and benefit from your issue.
> | >
> | > =====================================================
> | > This posting is provided "AS IS" with no warranties, and confers no
> rights.
> | >
> | >
> | >
> | >
> | > --------------------
> | > | Thread-Topic: Moving user account from NT to Win2k3
> | > | thread-index: AcV9ExqJWuE643MKQgibVQBLqQu11Q==
> | > | X-WBNR-Posting-Host: 202.140.234.94
> | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
> | > <WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | > | References: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
> | > <jjq6PZJfFHA.3016@xxxxxxxxxxxxxxxxxxxxx>
> | > | Subject: RE: Moving user account from NT to Win2k3
> | > | Date: Wed, 29 Jun 2005 18:29:05 -0700
> | > | Lines: 103
> | > | Message-ID: <A32915EB-DBAD-48D8-98B9-31348CD3EA65@xxxxxxxxxxxxx>
> | > | MIME-Version: 1.0
> | > | Content-Type: text/plain;
> | > | charset="Utf-8"
> | > | Content-Transfer-Encoding: 7bit
> | > | X-Newsreader: Microsoft CDO for Windows 2000
> | > | Content-Class: urn:content-classes:message
> | > | Importance: normal
> | > | Priority: normal
> | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | > | Newsgroups: microsoft.public.windows.server.migration
> | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | > | Xref: TK2MSFTNGXA01.phx.gbl
> | > microsoft.public.windows.server.migration:10994
> | > | X-Tomcat-NG: microsoft.public.windows.server.migration
> | > |
> | > | Hello Jason,
> | > |
> | > | Thank you for your suggestion. However, ADMT cannot be used in my
> case,
> | > bcs
> | > | there is no trust relationship i can build for the security reason.
> Any
> | > other
> | > | suggestion you can give? Can I export all accouts in NT4 and then
> import
> | > them
> | > | back in Win2k3? Thanks!
> | > |
> | > | "Jason Tan (MSFT)" wrote:
> | > |
> | > | > Hello,
> | > | >
> | > | > Thanks for posting!
> | > | >
> | > | > I understand that you want to migrate all user accounts from
> Windows NT
> | > | > Domain to Windows 2K3 Domain. If I have misunderstood your
> concerns,
> | > please
> | > | > feel free to let me know.
> | > | >
> | > | > Actually, ADMT can definitely accomplish your goal. You may
> establish
> | > | > relationship gracefully between the Windows NT domain and Windows
> 2k3
> | > | > domain. And you may run ADMT on the target domain controller
> (Windows
> | > 2k3
> | > | > DC).
> | > | >
> | > | > More information for your reference:
> | > | > How to establish trusts with a Windows NT-based domain in Windows
> | > Server
> | > | > 2003
> | > | > http://support.microsoft.com/default.aspx?scid=kb;en-us;325874
> | > | >
> | > | > Active Directory Migration Tool Overview
> | > | >
> | >
> http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/admt.
> | > | > asp
> | > | >
> | > | > Migrating from Windows NT Server 4.0 to Windows Server 2003
> | > | >
> | >
> http://www.microsoft.com/downloads/details.aspx?FamilyID=e92cf6a0-76f0-4e25-
> | > | > 8de0-19544062a6e6&DisplayLang=en
> | > | >
> | > | > Download Active Directory Migration Tool v.2.0
> | > | >
> | >
> http://www.microsoft.com/downloads/details.aspx?FamilyID=788975b1-5849-4707-
> | > | > 9817-8c9773c25c6c&DisplayLang=%20en
> | > | >
> | > | > 832221 How to configure the Active Directory Migration Tool to
> migrate
> | > user
> | > | > passwords from a Windows NT 4.0 domain to a Windows Server 2003
> domain
> | > | > http://support.microsoft.com/?id=832221
> | > | >
> | > | > Hope the information helps. If there is anything that is unclear,
> | > please
> | > | > feel free to let me know.
> | > | >
> | > | > Thanks & Regards,
> | > | >
> | > | > Jason Tan
> | > | >
> | > | > Microsoft Online Partner Support
> | > | > Get Secure! - www.microsoft.com/security
> | > | >
> | > | > =====================================================
> | > | >
> | > | > When responding to posts, please "Reply to Group" via your
> newsreader
> | > so
> | > | > that others may learn and benefit from your issue.
> | > | >
> | > | > =====================================================
> | > | > This posting is provided "AS IS" with no warranties, and confers no
> | > rights.
> | > | >
> | > | >
> | > | >
> | > | >
> | > | >
> | > | >
> | > | >
> | > | > --------------------
> | > | > | Thread-Topic: Moving user account from NT to Win2k3
> | > | > | thread-index: AcV8gI2z03bLMhejT+i0+8N6yxZn/A==
> | > | > | X-WBNR-Posting-Host: 202.140.234.94
> | > | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
> | > | > <WilsonCheung@xxxxxxxxxxxxxxxxxxxxxxxxx>
> | > | > | Subject: Moving user account from NT to Win2k3
> | > | > | Date: Wed, 29 Jun 2005 01:00:02 -0700
> | > | > | Lines: 4
> | > | > | Message-ID: <856ACE57-0188-4470-8572-23CCA313D64F@xxxxxxxxxxxxx>
> | > | > | MIME-Version: 1.0
> | > | > | Content-Type: text/plain;
> | > | > | charset="Utf-8"
> | > | > | Content-Transfer-Encoding: 7bit
> | > | > | X-Newsreader: Microsoft CDO for Windows 2000
> | > | > | Content-Class: urn:content-classes:message
> | > | > | Importance: normal
> | > | > | Priority: normal
> | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
> | > | > | Newsgroups: microsoft.public.windows.server.migration
> | > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
> | > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
> | > | > | Xref: TK2MSFTNGXA01.phx.gbl
> | > | > microsoft.public.windows.server.migration:10969
> | > | > | X-Tomcat-NG: microsoft.public.windows.server.migration
> | > | > |
> | > | > | Hello, my office is upgrading the OS from NT to Win2k3. But the
> pint
> | > is
> | > | > ADMT
> | > | > | cannot be used. I need to move all user account to the new domain
> and
> | > all
> | > | > the
> | > | > | user accounts object have retain the same as in NT 4. Is there
> any
> | > way I
> | > | > can
> | > | > | export them out and then import them to Win2k3 server? Thanks!!
> | > | > |
> | > | >
> | > | >
> | > |
> | >
> | >
> |
>
>
.

Relevant Pages

  • Re: DC Temporarily Off-line, Remaining DC Struggling
    ... suspects this issue is related to the account and roaming profile. ... Please make sure all user accounts are replicated to win2k3 DC. ... Does this issue only occurs if the user account uses ...
    (microsoft.public.windows.server.active_directory)
  • Re: WinNT cant see folders in Win2K3
    ... The name of the policy is: Accounts: Limit local account use of blank passwords to console logon only. ... Win2K3 using command line, ... WinNT, but WinNT can't see the shared folder on Win2K3. ... Win2K3 icon on WinNT however looks like there is a SUN behind the icon. ...
    (microsoft.public.win2000.networking)
  • Migrating user account from NT to Win2k3 via clonepr.vbs
    ... I have created a Win2k3 domain and established an external trust with our ... existing NT4 domain. ... the caller must be a member of the Domain Administrators ... account, but I don't know how to also make that account be a part of the NT4 ...
    (microsoft.public.windows.server.migration)
  • Re: Migrating user account from NT to Win2k3 via clonepr.vbs
    ... >I have created a Win2k3 domain and established an external trust with our ... the caller must be a member of the Domain Administrators ... > account, but I don't know how to also make that account be a part of the ... > NT4 Domain Admin group. ...
    (microsoft.public.windows.server.migration)
  • Re: Mailbox maps to Sid when running Data collection
    ... Priniciple through a trust relationship to the NT4 domain. ... Basically you have the SID on two objects currently 1 on a Windows Account, ... add permissions for the NT4 Account. ...
    (microsoft.public.exchange.setup)
Loading