Active Directory Migration Tool v3.1

Note: This article discusses a scenario that may be addressed by Microsoft Advisory Services.

Microsoft Advisory Services is an hourly fee-based, consultative support option that provides proactive support beyond your break-fix product maintenance needs. This is a remote, phone-based support option that includes working with the same technician for assistance with issues like product migration, code review, or new program development. This service is typically used for shorter engagements, and is designed for developers and IT professionals who do not require the traditional onsite consulting or sustained account management services that are available from other Microsoft support options. This article also provides some self-help resources for this scenario.

For additional information on Microsoft Advisory Services, including on how to engage, refer to this Microsoft web page:

http://support.microsoft.com/default.aspx?pr=AdvisoryService

This Advisory Services scenario will assist customers with installing and configuring ADMT v3.1.� We will also perform a test migration of no more than 5 users, groups, and computers between 2 domains in order to validate the configuration.

This advisory allows for installing and configuring ADMT v3.1.� Once ADMT is installed we will perform a migration of a small number of objects between the 2 domains as a proof of concept.� Objects will include users, groups, and computers.� We�ll also demonstrate how security translation works against resources by using a test computer.�

ASSUMPTIONS and PRE-REQUISITES

1. Review the�ADMT 3.1 migration guide
2. Only one computer will be designated as the ADMT computer and it must be Windows Server 2008
3. Trust must be established between the source and target domains
4. You will be limited to a small number of objects to migrate in order to test the configuration
5. This advisory scenario does not cover the migration of Exchange mailboxesThe minimum domain requirement is Windows 2000

Scoping questions

Statement of Work for this Scenario

ADMT Installation

Included with Scope

• Discuss and plan migration scenario
• Install ADMT on one machine
• Install password export service to migrate passwords with the users
• Configure necessary permissions for the designated user to migrate objects
• Migrate a small number of users and groups
• Migrate a small number of computers if necessary, no more than 5 for testing purposes
• Demonstrate Security Translation Wizard to change permissions on resources.� A test computer can be used

Out of Scope

• Migrating from a Windows NT 4.0 domain
• Migrating a large number of objects
• Migrating between more than 2 domains
• Migrating Exchange mailboxes

Scoping Questions

1. Are you attempting to migrate from NT 4.0 domain? Yes: Stop.� Migrating from NT 4.0 is not available in this scenario.
2. Do you have a Windows Server 2008 machine available to install ADMT 3.1? No: Stop.� Machine must be available to install ADMT 3.1.� Without it, we will be limited to only discussing and planning a migration scenario.
3. Do you have a trust setup between the source and target domains? No: Warning.� Trust should already be established between the domains.� If trust is not established, we can setup the trust but any issues with the trust would require a separate break/fix incident to be opened.