+ Post New Thread
Results 1 to 12 of 12
How do you do....it? Thread, Transfer Accounts & Passwords from NT4 PDC to Server 2003 in Technical; Hoping to pick peoples brains - I have collected a fair pile of links about how to upgrade from NT4 ...
  1. #1

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    65

    Transfer Accounts & Passwords from NT4 PDC to Server 2003

    Hoping to pick peoples brains - I have collected a fair pile of links about how to upgrade from NT4 PDC to Server 2003 on the same machine, and how to use a Server 2003 install as an NT4 style PDC, but nothing about quick and dirty transfer of users and computer accounts from an NT4 PDC to a fresh Server 2003 install on another server. Aiming to get all users and their passwords over and all computer accounts over without them having to be rejoined to a new domain domain (ie keep the same domain if possible).

    I'm in the usual situation of a creaky old NT4 PDC on it's last legs and trying to get everything over to a shiny new Server 2003 machine with minimum disruption - hopefully over half term. Server 2003 is a complete clean slate at the moment Does anyone have any tips (or even "Whatever you do, don't do what I did..." stories) on the easiest way to get accounts/passwords over?

    Although it would be nice not to have to, I'm happy to do file transfers manually, redo shares, reset permissions with CACLS if necessary and generally fiddle to get everything working but our kids won't be able to cope with returning after the holidays to a completely new set of passwords (and come to think of it, the teachers probably won't either!).

    Ben

  2. #2
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,439
    Thank Post
    10
    Thanked 490 Times in 430 Posts
    Rep Power
    111

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    Active directory migration Tool (ADMT). On microsofts website, and free.

    You should (not used NT4, but did a 2003 -> 2003 Migration). be able to copy the users and their SIDs, even group memberships I think. You can keep passwords too, but need to install some files for that.

    Its worth a look anyway, but can take a little while to setup

    http://www.microsoft.com/downloads/d...DisplayLang=en

  3. #3
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,439
    Thank Post
    10
    Thanked 490 Times in 430 Posts
    Rep Power
    111

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003


  4. #4

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    65

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    Excellent! Don't know how I missed that...

    ADMT v3 also performs security translation from Windows NT 4.0 domains to Active Directory domains and between Active Directory domains in different forests.
    Sounds like I have some more reading to do

    Thanks!

  5. #5
    ChrisH's Avatar
    Join Date
    Jun 2005
    Location
    East Lancs
    Posts
    4,999
    Thank Post
    120
    Thanked 280 Times in 258 Posts
    Rep Power
    106

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 200

    I used the ADMT to migrate from NT to 2003 with minimal fuss .

  6. #6
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,439
    Thank Post
    10
    Thanked 490 Times in 430 Posts
    Rep Power
    111

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 200

    Its a great bit of software, especially if you keep the SIDs, all I did was copy users into the new domain, retain their SIDs, backup thier folders with windows backup (to a file) and restore on the new domain, all the permisions were kept, excellent

    Keeping passwords between domains is wonderful :P

  7. #7

    m25man's Avatar
    Join Date
    Oct 2005
    Location
    Romford, Essex
    Posts
    1,625
    Thank Post
    49
    Thanked 454 Times in 335 Posts
    Rep Power
    137

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    All objects during migration are assigned a new SID in the target domain.
    The old SID is migrated and becomes the SID History allowing access to previous security objects.
    There is also a SID Cleanup process, and to ensure all machine accounts are migrated one has to "despatch" (thats install to you and me) an agent to every machine in order to perform the migration.

    Now all thats fine, and it works in text book fashion provided you rembered to turn them all on, but what about all of the other paraphnalia!
    Exchange, ISA and allsorts....

    Check you registry sizes after an ADMT migration they swell upto twice the previous size and that adds an overhead to the work stations.

    If you have no reason to change your NetBios Domain Name why not "Swing"!
    Prep the new 2k3 box set up the drives, join to the NT domain as a standalone box.
    Copy all of the users folders from old to new hardware using Robocopy XP
    Then,
    I use a VM, configure it as an NT4 BDC
    Sync it so you replicate all of the domain accounts and promote it to a BDC.
    UnPlug the old NT Server that is now an NT BDC.
    It is now your get out of jail free card!

    If you are really paranoid shut down the VM and copy the Virtual Hard Drive now.
    Restart the VM
    Perform an in place upgrade of the VM to Server 2003 in 45 minutes all of your domain user accounts are now 2003 as are the machines, groups etc etc etc.....

    Check your VM servers logs, DNS AD etc
    If all is good then now is time to DC Promo your new Hardware server.
    Transfer the FSMO Roles from the VM to the Hardware box.
    Set the new server as a Global Catalog.

    Your next move depends on what needs to happen to your old NT server box.

    You can turn it back on and remove it gracefully from the domain.

    If you do not do this now then you will have to clean up the old server info through NTDSUTIL and a Metadata Cleanup - a job for the experienced.

    The result Old Domain - New Hardware
    Everyone keeps their old SID, Security Context etc.
    No Workstations need to been on during this process there is no client interaction.

    Swinging is a valid and highly efficient method of Domain Migration - done it dozens and dozens of times even SBS Servers quick and easy huge domains in less than a few hours.

    ADMT3 or SWING

    Different techniques for different scenarios both valid and proven methods.

    You want quick n dirty - swinging takes some beating.

    GeoffH

  8. #8
    DMcCoy's Avatar
    Join Date
    Oct 2005
    Location
    Isle of Wight
    Posts
    3,439
    Thank Post
    10
    Thanked 490 Times in 430 Posts
    Rep Power
    111

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    You don't have to do the whole process though, I only used it to copy the users and passwords between domains, I rebuilt the clients and servers anyway.

  9. #9

    Join Date
    Feb 2006
    Location
    Derbyshire
    Posts
    1,381
    Thank Post
    181
    Thanked 211 Times in 171 Posts
    Rep Power
    65

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    Well, this got delayed and delayed and... You get the picture. Anyone have any final words on swinging? Sounds like the way to go for minimum disruption. Most of the docs I've found seem to be geared towards SBS migration though - I assume it's equally fine for a bog standard NT4 PDC with nothing but DHCP running on it? No other member servers in the domain to worry about.

  10. #10
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 44 Times in 34 Posts
    Rep Power
    29

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    DMcCoy has the best idea - at least, thats what worked with me [tho i couldnt manage to get the passwords to carry over as it seemed to imply that it needed 2000 not NT 4 lol but gave me the option to reset them all to a single password or to the same as the username etc - u get a few options in any case].

    I have commented in another thread how i did it - if u wanna search... but it basically was having a differently named domain on the new 2003 server / DC and migrating the users from the old NT domain to the new 2003 DC using the ADMT tool [i think thats the name] from MS.

    I exported the user shares [in the registry] to a reg file, then moved the home dir HDD into the new server, made the drive/partition letters the same, and imported the user dir shares.

    Then ran that ADMT tool and it all went beautifully - with the bonus of not having crap imported from the old domain, which is what i was worried about

    Regards
    Nath.

  11. #11
    Disease's Avatar
    Join Date
    Jan 2006
    Posts
    1,092
    Thank Post
    117
    Thanked 70 Times in 48 Posts
    Rep Power
    56

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    ADMT worked fine for me as well. It's the way to go.

  12. #12
    tarquel's Avatar
    Join Date
    Jun 2005
    Location
    Powys, Mid-Wales, UK
    Posts
    1,740
    Thank Post
    13
    Thanked 44 Times in 34 Posts
    Rep Power
    29

    Re: Transfer Accounts & Passwords from NT4 PDC to Server 2003

    ADMT - ha, i did remember correctly...

    Theres a first [tho technically, its not a hard one to guess at lol ]

    N.

SHARE:
+ Post New Thread

Similar Threads

  1. Replies: 3
    Last Post: 4th January 2008, 08:40 AM
  2. inactive computer accounts win2k3 server
    By joolsyjoolsy in forum Windows
    Replies: 5
    Last Post: 5th December 2007, 11:34 AM
  3. Multiple Email Accounts Outlook 2003
    By richard in forum How do you do....it?
    Replies: 3
    Last Post: 8th June 2007, 10:04 AM
  4. Replies: 16
    Last Post: 9th March 2007, 03:03 PM
  5. Replies: 2
    Last Post: 30th January 2007, 10:27 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •