Shulou(Shulou.com)06/01 Report--

This article will explain in detail what preparations are made for the use of ADMT for active directory migration. The content of the article is of high quality, so Xiaobian shares it with you for reference. I hope you have a certain understanding of relevant knowledge after reading this article.

What should be prepared before using ADMT for an Active Directory migration?

Question:

ADMT computer preparation for migration: How to use admt for Active Directory migration? This is my preparatory work or plan in front of the domain migration computer, only to throw a brick to attract jade, but also ask experts to give advice.

1. Add DNS mutually

2. Establish two-way trust in the domain

3, two domains add Administrator to each other domain Administrators group

4. Add script to group policy and turn on default sharing

ConstHKEY_LOCAL_MACHINE=&H80000002 setWshShell=WScript.CreateObject("WScript.Shell") strComputer=". " SetobjReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\ "&_ strComputer&"\root\default:StdRegProv") strKeyPath="SYSTEM\CurrentControlSet\Services\lanmanserver\parameters" objReg.EnumValuesHKEY_LOCAL_MACHINE,strKeyPath,_ arrValueNames,arrValueTypes Fori=0ToUBound(arrValueNames) ifarrValueNames(i)="AutoShareServer"Then WshShell.RegWrite "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\AutoShareServer","1","REG_DWORD" Endif ifarrValueNames(i)="AutoShareWks"Then WshShell.RegWrite "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters\AutoShareWks","1","REG_DWORD" Endif Next

5. Group Policy Disable Windows Firewall (Add both sides)

Group Policy-Computer Configuration-Windows Settings-Security Settings-System Services-Windows Firewall/Internet

ConnectionSharing(ICS)-Defines this policy setting-Deactivated

6. Group Policy forces the RemoteRegistry service to start (plus both sides)

Group Policy-Computer Configuration-Windows Settings-Security Settings-System Services-RemoteRegistry-Define this policy Settings-Automatic

7. Restart the computer remotely before migration

shutdown-r-f-m[url=file://\\computername1]\\computername1[/url]

shutdown-r-f-m[url=file://\\computername2]\\computername2[/url]......

Answer:

If you are setting up ADMT for migration from Windows NT 4.0 to Windows Server 2003, you must perform the following domain configuration and security configuration before migrating a Windows NT 4.0 domain to a Windows Server 2003-based domain.

trust relationship

1. Configure source domain to trust target domain.

2. Configure target domain to trust source domain.

group

1. Add DomainAdmins global group in the source domain to Administrators local group in the target domain.

2. Add DomainAdmins global group in the target domain to Administrators local group in the source domain.

3. Create a new local group named SourceDomain$$$in the source domain.

audit

1. Enable auditing of successes and failures of user and group management on the source domain.

2. Enable auditing of successes and failures of Audit account management on the target domain in the Default Domain Controller policy.

registry

On the PDC in the source domain, add the TcpipClientSupport:REG_DWORD: 0x1 value to the following registry key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA

system management sharing

The system administration share must exist on the domain controller in the target domain on which ADMT is to run, and on any computer on which the agent will be dispatched.

user rights

When logging on to the computer on which ADMT will run, the account used must have the following permissions:

Domain administrator privileges in the target domain.

A member of the Administrators group in the source domain.

Administrator privileges on each computer you want to migrate.

Administrator privileges on each computer whose security you want to convert.

What are the preparations for using ADMT for Active Directory migration? I hope the above content can help you and learn more. If you think the article is good, you can share it so that more people can see it.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.