Detailed explanation of the use of ADMT in Windows Server 2003

Source: Internet
Author: User

ADMT (Active Directory migration Tool) is a set of wizard interfaces that integrates a number of versatile migration tools-providing data such as user accounts, groups, computers, service accounts, trust relationships, etc. for a domain's ad database to another new domain, so that These ad databases do not have to be rebuilt in the new domain.

1.ADMT Precautions before use

1) backing up the ad database, an unexpected condition for the anti-ADMT migration tool, and unable to recover the migrated ad data.

2 Migrate the order of the ad, first migrate less important or less data ad, in case of problems, less loss

3 Upgrading the domain functional level of the source and target domains to at least the pure mode of Windows 2000, to enable the ADMT migration Tool to function properly, upgrade the source and target domain domain functional level to Widows 2000 pure weapon, so as to be able to recover from the migration process when the last Migration Wizard .

4 using the test options provided by the ADMT tool, test the migration steps first, and the ADMT tool provides this mechanism to help managers avoid problems with migration and cannot be recovered, and recommends that you test the actual migration process first.

5. Be aware of the dependencies of the migration project. For example, to migrate an account that belongs to a member of a global group with specific permissions, you should migrate the global groups to which you belong before migrating the account data before you can keep the old permissions after the accounts are migrated.

2.ADMT environment settings prior to use

Following the ad data from the source domain "meizhou.com", migrating to the target domain "shanghai.com" requires the following environmental settings, in addition to installing ADMT.

1 establish the trust relationship between source and target domain

2) Set Audit policy

3 in the target domain pre--windows Compatible Access group, add "Everyone" and "ANONYMOUS LOGON" and other systems groups

4 Install ADMT on the target domain DC

5 Install Password Export Server on the source domain DC above.

Establish a trust relationship between the source and the target domain

Setting up audit policies

On each DC in the source and target domain, set audit policy, first on the DC of the target domain, and execute the Start/System Administration Tools/ad users and Computers command

Point attribute

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.