Jump to content

Recommended Posts

Posted

I've done lots of domain migrations in a past life... so more than happy to offer advice.

 

I've used a variety of methods in the past to move data (including robocopy and xcopy) - I found the easiest way to get data from one place to another is to just restore it from your backup media, and then apply shares and permissions using a batch file.

 

I then use an excel spreadsheet (with various concatenate commands in it!) to generate the commands to run the batch files.

  • Thanks 1
Posted
I think the last time I created a new doamin I used the PantsCat's method. Backup the data then restore from the backup. It was only a small domain of about 20 users so not a big job. I tend to use robocopy on my other server migrations as I keep the domain.
Posted
Probably going to use robocopy to do the migration on our file server then recreate the shares using the registry key export \ import method...
Posted (edited)

Sounds good.

 

Method I've used in the past was fairly manual and along the lines of above.

 

Step 1:

Create the target users and groups and home directories in new domain.

Step 2:

create a CSV mapping old usernames to new usernames, old home folders to new home folders

 

Step 3:

For each set of folders to be moved I created a one or two line batch file.

Read in line of CSV and Robocopied the user home directory contents across, without the security permissions (so that they inherited the permissions set on the target during the user creation process) Don't forget this is your opportunity to leave behind the crud ( ~$* .tmp, stuff from macs etc)

 

Shared Files and Folders

Step 1:

Create a CSV mapping old users and groups to new users and groups. (also contained NTGUIDs)

Step 2:

Robocopied the shared folders across, but this time including NTFS permissions since they were complex.

Used subinacl to change ACEs referencing guids of old domain objects to guids of the corresponding objects in the new domain.

I think the complicated guids bit can be made to reference group/usernames if there is a trust relationship between the two domains.

 

 

I like to keep the number of shares to a minimum so manually creating equivalents in the new domain was ten minutes work by hand.

 

Don't forget there might be stuff you want to bring across from Profiles (like the Favorites, or Firefox settings), fairly trivial to achieve if you've got the above sorted.

 

Don't forget to log everything so you can review and spot issues before the users complain data is missing!

Edited by psydii

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now



×
×
  • Create New...