Active Directory migration tool ADMT

Source: Internet
Author: User

Active DirectoryHow can we migrate data from one system to another? In this case, the migration tool ADMT of Active Directory plays a role. So what is ADMT?

Overview

Active DirectoryTM migration tool (ADMTProvides a convenient, reliable, and fast way to migrate from Windows NT to Windows 2000 Server Active Directory Service. You can also use ADMT to refactor the Windows 2000 Active Directory domain. This tool helps the system administrator diagnose any possible problems before starting the migration operation. Then, the task-based wizard allows you to migrate users, groups, and computers, set correct file permissions, and migrate Microsoft Exchange Server mailboxes. Before and after migration, you can use the report feature of this tool to evaluate the impact of migration.

In many cases, if a problem occurs, you can use the rollback function to automatically restore the original structure. This tool also provides support for parallel domains, so you can maintain the existing Microsoft Windows NT 2000 operating system while deploying the Microsoft Windows 4.0 operating system.

Advantages

ADMT provides an effective tool that simplifies the process of migrating users, computers, and groups to a new domain. At the same time, ADMT has great flexibility, and each organization can use it to implement the migration process as needed. With this powerful tool, you can:

Migrate data from Windows NT. You can use ADMT to migrate data from a Windows NT instance to a Windows 2000 instance. During this migration, You can benefit from some important features introduced by Active Directory, including:

Improved scalability. With the improved scalability in the Active Directory forest Directory, you can configure the current Windows NT domain to a Windows 2000 Active Directory domain with a smaller number and larger capacity. Simplified domain structure is usually simplified to a domain) also makes it easier to manage user, group, and group policies.

Manage delegates. By merging Windows NT resource domains into Active Directory Organization Unit (OU), you can delegate management control over specific OU to administrators with only partial domain permissions.

Simplified trust. If the current domain structure requires a complex trust network, you will be greatly benefited from re-planning to use less trust by using the two-way convertible trust relationships provided on Windows 2000.

Refactor Windows 2000. You can use ADMT to restructure the Windows 2000 Domain Structure. Similar to the migration from Windows NT to Windows 2000, the internal migration from Windows 2000 allows merging multiple domains into a smaller number of domains, or even a single domain.

Customize the migration as needed. ADMT allows you to specify how users, passwords, computers, groups, group members, security transfer, and monitoring options are processed during migration.

ADMT Function

With The ADMT feature, you can effectively manage domain migration and fine-tune the results to meet their requirements.

You do not need to manually install the software on all those computers.

When using ADMT to migrate users and groups, you usually install The ADMT tool on the console where the destination domain security supervisor or resources will be migrated to this domain. In addition, ADMT does not require other software to be installed on the computer in the source domain to be migrated from this domain to a security supervisor or resource.

When you migrate a computer to a resource or transfer security, ADMT automatically calls the service a proxy) to install it on the source computer. This means that you do not need to manually load the software to each source computer for migration. Once the proxy task is completed, it will unmount it on its own.

You can use the Wizard to simplify this process. ADMT allows you to use a series of Wizard to simplify the migration process, including user migration wizard, computer migration wizard, group migration wizard, service account migration wizard, trusted migration wizard, and Report Wizard.

This option is suitable for you. During migration, select the appropriate options provided by various wizard. For example, you can copy the user permissions assigned in the source domain to the target domain. You can copy the group and its members to the target domain. You can make the user accounts in the source and target domains active; for the selected user account, you can copy the roaming configuration file to the target domain.

Reconstructs a group. (Optional) You can run the "Group ing and merging wizard" before the Migration Group to map a group in the source domain to a new or existing group in the target domain. This ing ensures that the ing is reflected when the group members migrate from the source domain to the target domain. You can combine multiple groups.

Trial run. By selecting the "test migration settings and subsequent migration" option, you can run a wizard without making any actual changes to the network. Check the log files and reports generated by this wizard to identify and eliminate any potential problems before the actual migration.

Undo. You can cancel Recent user, group, or computer migration.

The user maintains access to the resource. During user and group migration, ADMT uses the sIDHistory function or updates resources by referring to the migrated users. This allows users to maintain resource migration access, such as files, shares, and applications. This function allows the security structure to allow and deny access to resources. It is well preserved and can be easily migrated to a new domain.

The user maintains access to Exchange resources. If you need to update the security permissions on the Exchange mailbox to reflect the migration process, you can use ADMT to implement this process.

Also migrate the service account. ADMT also migrates the service account. Many applications such as Microsoft Exchange use service accounts to run services with the same set of creden。 on some network computers.

Put the object in OU. In addition to merging Windows NT resource domains into Active Directory OU, ADMT allows you to migrate selected users, groups, or computers to the OU of the target domain. Then, use the Windows 2000 function to manage these OU. For example, you can create a group policy configuration setting for a group of computers in the specified OU.

Process the trust relationship. The trust relationship connects two domains so that users in the trusted domains can access resources in the trusted domains. To maintain access to resources during migration, you must establish the same trust relationship with the source domain in the target domain. Use the trust migration Wizard to complete this process-it compares the trust relationships in the source domain with the trust relationships in the target domain, then, create any trust relationships in the source domain in the target domain.

Use the new unified group scope. During the internal migration of the forest directory, that is, when two Windows 2000 domains in the same forest directory are migrated), when the Global Group is migrated from the source domain in the original mode, create the Group as a unified group in the target domain so that they can contain members not migrated in the source domain. A global group only contains members in their own domains. A unified group can contain members in any Windows 2000 domain in the forest directory.

ADMT System Requirements

Target Domain. For the target domain, ADMT can run on any computer that can run Windows 2000 Server.

Source domain. The source domain must run Windows 2000 or Windows NT 4.0.

SP4 or later must be installed on the primary domain controller (PDC) of the Windows NT 4.0 source domain. The ADMT agent is installed by The ADMT on the source computer) on a computer running Windows NT 3.51 with SP5), Windows NT 4.0 with SP4 or later), or Windows 2000.

I believe you have some knowledge about the Active Directory migration tool ADMT.

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.