《Domain Migration Using The Microsoft Active Directory Migration Tool(1).ppt》由会员分享，可在线阅读，更多相关《Domain Migration Using The Microsoft Active Directory Migration Tool(1).ppt（27页珍藏版）》请在三一办公上搜索。
1、Domain Migration Using the Active Directory Migration Tool(ADMT)Tuanh NguyenCurtis Clay IIIWindows 2000 Directory Services TeamMicrosoft Corporation,2,What Is ADMT,The Active Directory Migration Tool is a GUI-based utility that is used to migrate users,groups,computers,service accounts,and trust rel
2、ationships from one domain to another.Downloaded from http:/,3,Domain Migration Concepts,UpgradeMigrationIntraforestInterforest,4,Upgrade vs.Migration,Upgrade:Retains domain structure,users,and groupsSIDs are unchanged,therefore,resource access is not affected,5,Upgrade vs.Migration(2),Migration:Con
3、solidate multiple domains into one domainRedesign domain structure to fit the needs of the organization,as opposed to inheriting existing domain structureProvides fallback options to existing domainTimed transition to move objects to new domain without interrupting production environment,6,Terminolo
4、gy,Target domainSource domainSecurity Identifier(SID)SID historyNative modeMixed mode,7,Types of Objects to Migrate,UsersGroupsComputersService accountsTrust relationships,8,Types of Objects to Migrate(2),User rightsProfilesSID history Permissions,9,Requirements,Target domain must be Microsoft Windo
5、ws 2000Source domain can be Windows NT 4.0 or Windows 2000For interforest,target domain must be in native modeFor intraforest,both source and target domains must be in native mode,10,Requirements(2),A two-way trust must exist between the source and target domainOn the target domain,the user running
6、ADMT must be a member of the domain admins groupOn the source domain,the user must be a member of the local administrators group,11,Requirement(3),Auditing must be enabled in both target and source domainsAn empty group srcDOMAIN$must be created in the source domainSource domain must have the HKEY_L
7、OCAL_MACHINESystemCCSControlLSATcpipClientSupport to 0X1 registry key(Note that the registry key is all one line;it is wrapped here for readability),12,ADMT Wizards,User Account Migration WizardGroup Migration WizardComputer Migration WizardSecurity Translation WizardReporting Wizard,13,Wizards(2),S
8、ervice Account Migration WizardExchange Directory Migration WizardTrust Migration WizardGroup Mapping and Merging Wizard,14,User Migration Wizard Walkthrough,15,16,17,18,19,20,21,22,23,24,Log files default location:Program FilesActive Directory Migration WizardLogs,25,Resources,“Domain Migration Coo
9、kbook”http:/“How to Set Up ADMT for Windows NT to Windows 2000 Migration”“Planning Migration from Windows NT to Windows 2000”http:/,(Note that the URLs should be entered as one line;they are wrapped here for readability.),26,Resources(2),Windows 2000 Server Resource Kithttp:/Migration from Windows NT to Windows 2000”http:/,(Note that the URLs should be entered as one line;they are wrapped here for readability.),
