Domain Migration

[JonGee]

Morning Gents,

 

I was wondering if anyone has performed a domain migration before. I am moving everything to a new domain in a new forest. Its 2008R2 functional level to 2008R2 functional level so nothing complicated there. I was looking to use the ADMT but have not had any experience of it before. How much is it actually going to move for me. User accounts and machine objects obviously. What about group policy objects etc? I'm guessing I'm going to have to resetup all of our certificate services for wireless authentication too.

 

With regards to the files, we have a QNAP serving files directly to users. I understand that using the ADMT, SID's will be copied across to users will be able to access resources without setting up new permissions right away?

 

Any insight you could give me would be much appreciated.

[glennda]

Most things are not that complicated when doing this apart from time consuming. The only major headache is Exchange.

[Michael]

ADMT has hit and miss for me on 2003 Server. Not had to use it on 2008 R2 as yet.

 

With regards to GPOs, you can export them via GPMC on 2003 Server (for example) and import them into 2008 R2's GPMC. You can also do 2008 to 2008 R2 as well.

[ChrisH]

ADMT has hit and miss for me on 2003 Server. Not had to use it on 2008 R2 as yet.

 

With regards to GPOs, you can export them via GPMC on 2003 Server (for example) and import them into 2008 R2's GPMC. You can also do 2008 to 2008 R2 as well.

 

Does that covert them to admx or are they imported as adm ?

[Michael]

Good question - Before you import a GPO, you need to create a new GPO (to import into) so it will be in ADMX format on 2008 R2. Importing the GPO from 2003 to 2008 R2 will keep settings 'as is', but will of course provide all new GPOs 2008 R2 offers. This is where filtering can help, as you can specify the OS level you want to see GPOs for.

 

Windows XP has no problem reading all this providing you install the Group Policy Preference Client Side Extensions hotfix.

 

Windows Vista, Windows 7 and Windows 8 will read everything by default.

[sukh]

Any reason for a new forest deployment here?

If you have Exch, then you will need to prep/migrate objects & services.