Detailed explanation of the use of ADMT in Windows Server 2003

ADMT (Active Directory migration Tool) is a set of wizard interfaces that integrates a number of versatile migration tools-providing data such as user accounts, groups, computers, service accounts, trust relationships, etc. for a domain's ad database to another new domain, so that These ad databases do not have to be rebuilt in the new domain.

1.ADMT Precautions before use

1) backing up the ad database, an unexpected condition for the anti-ADMT migration tool, and unable to recover the migrated ad data.

2 Migrate the order of the ad, first migrate less important or less data ad, in case of problems, less loss

3 Upgrading the domain functional level of the source and target domains to at least the pure mode of Windows 2000, to enable the ADMT migration Tool to function properly, upgrade the source and target domain domain functional level to Widows 2000 pure weapon, so as to be able to recover from the migration process when the last Migration Wizard .

4 using the test options provided by the ADMT tool, test the migration steps first, and the ADMT tool provides this mechanism to help managers avoid problems with migration and cannot be recovered, and recommends that you test the actual migration process first.

5. Be aware of the dependencies of the migration project. For example, to migrate an account that belongs to a member of a global group with specific permissions, you should migrate the global groups to which you belong before migrating the account data before you can keep the old permissions after the accounts are migrated.

2.ADMT environment settings prior to use

Following the ad data from the source domain "meizhou.com", migrating to the target domain "shanghai.com" requires the following environmental settings, in addition to installing ADMT.

1 establish the trust relationship between source and target domain

2) Set Audit policy

3 in the target domain pre--windows Compatible Access group, add "Everyone" and "ANONYMOUS LOGON" and other systems groups

4 Install ADMT on the target domain DC

5 Install Password Export Server on the source domain DC above.

Establish a trust relationship between the source and the target domain

Setting up audit policies

On each DC in the source and target domain, set audit policy, first on the DC of the target domain, and execute the Start/System Administration Tools/ad users and Computers command

Point attribute