Re: Howto: migrate service accounts on workstations
- From: "Franz Schenk" <franzNO-_-SPAM.no-sPAMschenk@xxxxxxxx>
- Date: Thu, 27 Sep 2007 11:18:01 +0200
Mi Mathieu
Thank you very much for your feedback. Your script is indeed a solution that is better than the manual way. But it doesn't solve my initial problem of actually migrating the service account from the old to the new domain. ADMT 3.0 has a "service account migration wizard" that should translate all the rights that the old service account had (like "logon as a service" etc. This works perfect for migrating a service account that is used on a DC, ADMT runs an agent that even automatically change the service logon information.
What I'm searching is the correct procedure with ADMT 3.0 to migrate a service account (the service user account is in the NT4 domain) on all workstations that are running a service with this account.
regards,
Franz
"Mathieu CHATEAU" <gollum123@xxxxxxx> schrieb im Newsbeitrag news:uaCn4dNAIHA.1212@xxxxxxxxxxxxxxxxxxxxxxx
The link to the vbsript mentionned in my previous message does it.
Manual way:
Start / run /services.msc
search the service your want to change
double click
go to the Log On tab
change the account and password
restart the service
--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com
"Franz Schenk" <franzNO-_-SPAM.no-sPAMschenk@xxxxxxxx> wrote in message news:uri7eDNAIHA.5312@xxxxxxxxxxxxxxxxxxxxxxxHello
There are no scheduled tasks, my question is about migrating a service account on the workstations. If someone has an idea or an answer to my initial question, thank you in advance!
Franz
""Ken Zhao [MSFT]"" <v-kzhao@xxxxxxxxxxxxxxxxxxxx> schrieb im Newsbeitrag news:vd9195KAIHA.5972@xxxxxxxxxxxxxxxxxxxxxxxxxHello Franz,
Thank you for using newsgroup!
Also thanks Mathieu's information sharing with us.
Thanks & Regards,
Ken Zhao
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security <http://www.microsoft.com/security>
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| Reply-To: "Mathieu CHATEAU" <gollum123@xxxxxxx>
| From: "Mathieu CHATEAU" <gollum123@xxxxxxx>
| References: <uifN2nDAIHA.5960@xxxxxxxxxxxxxxxxxxxx>
| In-Reply-To: <uifN2nDAIHA.5960@xxxxxxxxxxxxxxxxxxxx>
| Subject: Re: Howto: migrate service accounts on workstations
| Date: Wed, 26 Sep 2007 18:43:17 +0200
| Lines: 43
| MIME-Version: 1.0
| Content-Type: text/plain;
| format=flowed;
| charset="iso-8859-1";
| reply-type=response
| Content-Transfer-Encoding: 7bit
| X-Priority: 3
| X-MSMail-Priority: Normal
| X-Newsreader: Microsoft Windows Mail 6.0.6000.16480
| X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16480
| Message-ID: <OcxlYxFAIHA.5980@xxxxxxxxxxxxxxxxxxxx>
| Newsgroups: microsoft.public.windows.server.migration
| NNTP-Posting-Host: 81.80.21.121
| Path: TK2MSFTNGHUB02.phx.gbl!TK2MSFTNGP01.phx.gbl!TK2MSFTNGP04.phx.gbl
| Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.migration:2195
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| Hello,
|
| do not forget scheduled stasks too...
|
| If you have many stations, you may automate this task, like using this
| script:
| http://techtasks.com/code/viewbookcode/594
|
| Just need a wrapper around to make all workstation, one after one
|
| -- | Cordialement,
| Mathieu CHATEAU
| http://lordoftheping.blogspot.com
|
|
| "Franz Schenk" <franzNO-_-SPAM.no-sPAMschenk@xxxxxxxx> wrote in message
| news:uifN2nDAIHA.5960@xxxxxxxxxxxxxxxxxxxxxxx
| >- have to migrate an NT4 domain into a Windows 2003 AD. Using ADMT V3
| > - the operator of the Windows 2003 AD tolerates only a one way trust
from
| > the NT4 domain to the Windows 2003 domain. A two way trust is not
| > possible.
| > - There is a SW distribution solution in the old domain in place that
runs
| > an agent as a service under the account <olddomain>\<sw-dist-user> on
| > every workstation.
| > - The user <olddomain>\<sw-dist-user> is in the domain admins group of
the
| > old domain and has therefore local admin rights on all workstations
before
| > they are migrated.
| >
| > Due to the one way trust requirement, The SW distribution agent on all
| > workstations will not work anymore after the workstation is migrated
into
| > the new domain. We can migrate the user <olddomain>\<sw-dist-user> into
| > the new domain. But the whole procedure is not clear to me:
| >
| > 1. How do we have to migrate the user <olddomain>\<sw-dist-user>? This
| > user account is not used on the NT4 DC's and therefore not recognized
from
| > ADMT as a service account.
| > 2. How can we change the SCW entries (the account information in the
| > services applet on the workstations) on the workstations?
| >
| > Thank you in advance for any clarification and help!
| > Franz
|
|
.
- Follow-Ups:
- Re: Howto: migrate service accounts on workstations
- From: Mathieu CHATEAU
- Re: Howto: migrate service accounts on workstations
- References:
- Howto: migrate service accounts on workstations
- From: Franz Schenk
- Re: Howto: migrate service accounts on workstations
- From: Mathieu CHATEAU
- Re: Howto: migrate service accounts on workstations
- From: "Ken Zhao [MSFT]"
- Re: Howto: migrate service accounts on workstations
- From: Franz Schenk
- Re: Howto: migrate service accounts on workstations
- From: Mathieu CHATEAU
- Howto: migrate service accounts on workstations
- Prev by Date: Re: User Migration issue
- Next by Date: Re: Migration: W2k to W3k R2 SP2 x64 Forest not prepared even after adprep
- Previous by thread: Re: Howto: migrate service accounts on workstations
- Next by thread: Re: Howto: migrate service accounts on workstations
- Index(es):
Relevant Pages
|
