Shulou(Shulou.com)06/01 Report--

The use of Active Directory migration tool ADMT, many novices are not very clear about this, in order to help you solve this problem, the following editor will explain in detail for you, people with this need can come to learn, I hope you can gain something.

How does Active Directory migrate from one system to another? At this point, Active Directory's migration tool, ADMT, plays a role. So what is ADMT?

Overview

The Active DirectoryTM Migration tool (ADMT) provides a convenient, reliable, and quick way to migrate from Windows NT to Windows 2000 Server Active Directory services. You can also use ADMT to ReFactor Windows 2000 Active Directory domains. This tool helps system administrators diagnose any possible problems before starting the migration operation. The task-based wizard then allows you to migrate users, groups, and computers, set the correct file permissions, and migrate Microsoft Exchange Server mailboxes. Before and after the migration, you can use the reporting features of this tool to assess the impact of the migration.

In many cases, if there is a problem, you can use the rollback feature to automatically restore the original structure. This tool also provides support for parallel domains, so you can deploy the Microsoft Windows 2000 operating system while maintaining the existing Microsoft Windows NT 4.0 operating system.

advantage

ADMT provides an effective tool that simplifies the migration of users, computers, and groups to a new domain. At the same time, ADMT has a great deal of flexibility, and each organization can use it to implement the migration process as needed. With this powerful tool, you can:

Migrate from Windows NT. You can use ADMT to migrate from Windows NT to Windows 2000. During this migration, you can benefit from some important features introduced by Active Directory, including:

Improved scalability. With the improved scalability in the Active Directory forest directory, which can have millions of objects, you can reconfigure your current Windows NT domain into a smaller, larger Windows 2000 Active Directory domain. Simplifying the domain structure (usually reduced to one domain) also makes it easier to manage users, groups, and group policies.

Manage delegation. By merging Windows NT resource domains into the Active Directory organizational Unit (OU), you can delegate administrative control over a particular OU to administrators with only partial domain permissions.

Trust simplification. If the current domain structure requires a complex network of trust relationships, you will benefit greatly by reprogramming to use less trust by using the two-way transitive trust relationships available on Windows 2000.

ReFactor Windows 2000. You can use ADMT to reorganize the Windows 2000 domain structure. Like Windows NT to Windows 2000 migration, Windows 2000 internal migration allows multiple domains to be merged into fewer domains, perhaps even a single domain.

Customize the migration as needed. ADMT allows you to specify how users, passwords, computers, groups, group membership, secure transfer, and monitoring options are handled during migration.

ADMT function

Using the ADMT feature, you can effectively manage domain migrations and fine-tune the results to meet their requirements.

There is no need to manually install the software on all those computers.

When you use ADMT to migrate users and groups, you typically install the ADMT tool to the console of the target domain to which the security supervisor or resources will be migrated. In addition, ADMT does not require additional software to be installed on computers in the source domain from which security supervisors or resources are migrated.

When you migrate a computer or transfer security on a resource, ADMT automatically installs the service (called an agent) on the source computer. This means that you do not need to manually load the software on each source computer for migration. Once the agent task is complete, it uninstalls itself.

Use the wizard to simplify the process. ADMT allows you to use a series of wizards to simplify the migration process, including the user Migration Wizard, the computer Migration Wizard, the Group Migration Wizard, the Service account Migration Wizard, the Trust Migration Wizard, and the report Wizard.

The option that suits you. When migrating, select the appropriate options provided by the various wizards. For example, you can copy the user rights assigned in the source domain to the target domain, you can copy the group and its members to the target domain, you can make the user accounts in the source and destination domains active, for the selected user account, you can copy the roaming profile to the target domain, and so on.

Reconstruct the group. Optionally, you can run the Group Mapping and merge Wizard before migrating groups to map a group in the source domain to a new or existing group in the target domain. This mapping ensures that group membership reflects this mapping when group members migrate from the source domain to the target domain. You can combine multiple groups into one group.

Trial run. By selecting the Test Migration Settings and then migrate option, you can run a wizard without making any actual changes to the network. Review the log files and reports generated by this wizard to identify and troubleshoot any potential problems before the actual migration.

Undo. You can undo recent user, group, or computer migrations.

The user maintains access to the resource. During user and group migration, ADMT uses the sIDHistory feature or references migrated users to update resources, allowing users to maintain migration access to resources, such as files, shares, and applications. This feature preserves the security structure (granting and denying access to resources) and easily migrates it to a new domain.

The user maintains access to Exchange resources. If you need to update the security permissions on your Exchange mailbox to reflect the migration process, you can use ADMT to do so.

The service account is also migrated. ADMT also migrates the service account. Many applications, such as Microsoft Exchange, use service accounts to run services with the same set of credentials on some network computers.

Put the object into the OU. In addition to merging Windows NT resource domains into Active Directory OU, ADMT allows you to migrate selected users, groups, or computers to OU in the target domain. Then, use the Windows 2000 feature to manage these OU, for example, you can establish Group Policy configuration settings for a group of computers in a specified OU.

Deal with trust relationships. The trust relationship connects the two domains so that users in the trusted domain can access resources in the trusted domain. During the migration process, to maintain access to resources, the same trust relationship must be established in the target domain as in the source domain. Use the Trust Migration wizard to do this-it compares the trust relationship in the source domain with the trust relationship in the target domain, and then creates any trust relationships that exist in the source domain.

Use the new unified group scope. During migration within a forest directory (that is, between two Windows 2000 domains in the same forest directory), when a global group is migrated from the original schema source domain, the group is created as a unified group in the destination domain so that they can contain members in the source domain that have not yet been migrated. Global groups contain only members of their own domain; unified groups can contain members of any Windows 2000 domain in the forest directory.

ADMT system requirements

Target domain. For the target domain, ADMT can run on any computer that can run the Windows 2000 Server operating system.

Source domain. The source domain must be running Windows 2000 or Windows NT 4.0.

The primary domain controller (PDC) of the Windows NT 4.0 source domain must have SP4 or later installed. The ADMT agent (installed by ADMT on the source computer) can run on computers running Windows NT 3.51 with SP5, Windows NT 4.0 with SP4 or later, or Windows 2000.

Through the introduction of the Active Directory migration tool ADMT, I believe you have a certain understanding, so do it yourself.

Is it helpful for you to read the above content? If you want to know more about the relevant knowledge or read more related articles, please follow the industry information channel, thank you for your support.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.