Active DirectoryTM Migration Tool (ADMT) provides a convenient, reliable and fast way to migrate from Windows NT® to Windows® 2000 Server Active Directory services. You can also use the ADMT to reconstruct the Windows 2000 Active Directory domain. This tool helps system administrators to diagnose any possible problems before starting migration. Subsequent, task-based wizards will allow you to migrate users, groups, and computers, set correct file permissions, and migrate Microsoft Exchange Server mailboxes. Before and after migration, you can use this tool's reporting function to assess the impact of migration.
In many cases, if there is a problem, you can use the rollback function to automatically restore the original structure. This tool also provides support for parallel domains, so you can maintain an existing Microsoft Windows NT 4.0 operating system while deploying a Microsoft Windows 2000 operating system.
Advantage
ADMT provides an effective tool that simplifies the process of migrating a new domain, computer, and grouping. At the same time, ADMT has great flexibility, and each organization can use it to implement the migration process as needed. With this powerful tool, you can do:
Migrate from Windows NT. You can migrate from Windows NT to Windows 2000 using ADMT. During this migration, you can benefit from some important features introduced by Active Directory, including:
Improved scalability. With the improved scalability in the Active Directory forest directory (can have millions of objects), you can reconfigure the current Windows NT domain to a larger number of Windows 2000 Active Directory domains. Simplify domain structures (usually simplified to one domain) also make users, group, and group strategies more convenient. Management delegation. By merged with the Windows NT resource domain into the Active Directory Organization Unit (OU), you can delegate administrators for specific OUs to only some domain privileges. Trust is simplified. If the current domain structure requires a complex trust relationship, re-plan use less trust by using the two-way communication provided on Windows 2000, you will benefit from it.
Reconstructing Windows 2000. You can use the ADMT to change the Windows 2000 domain structure. Like the migration of Windows NT to Windows 2000, Windows 2000 internal migration also allows multiple domains to be less domains, and may even be a domain. Custom migration as needed. ADMT allows you to specify how to handle users, passwords, computers, groups, group members, secure shifts, and monitor options during the migration.
ADMT function
With the ADMT feature, you can effectively manage domain migrations and fine adjust the results to meet their requirements.
You don't need to manually put the software on all those computers.
When using the ADMT migrating users and groups, you usually install the ADMT tool to the console (security supervisor or resource) on the console in this domain). In addition, the ADMT does not require additional software on a computer (from this domain migration security supervisor or resource). When a computer or transfer is migrated on a resource, the ADMT automatically installs the service (called agent) to the source computer. This means you don't need to manually load the software on each source computer to migrate. Once the proxy task is completed, it will uninstall itself.
Use the wizard to simplify this process. ADMT allows you to use a series of wizards to simplify each partial migration process, including User Migration Wizard, Computer Migration Wizard, Group Migration Wizard, Service Account Migration Wizard, Trust Migration Wizard, and Report Wizard. Suitable for you. When migrating, select the appropriate options provided by various wizards. For example, you can copy user permissions assigned to the source field to the target domain; you can copy the group and its members into the target domain; you can make the source and the user account in the target domain to active status; for selected User account, you can copy roaming profiles to the target domain. Reconfiguration group. Alternatively, "Group Mapping and Concial Wizard" can be run before the migration group, and a group in the source domain is mapped to a new or existing group in the target domain. This mapping guarantees that the group member identity will reflect this map when the group member migrates from the source field to the target domain. You can combine multiple combinations into a group. Trial operation. By selecting the "Test Migration Settings and Subsequent Migration" option, you can run a wizard without any actual changes to the network. Check the log files and reports generated by this wizard, find out any potential issues before actual migration. Revoke. You can undo the most recently conducted user, group, or computer migration. Users maintain access to resources. During the user and group migration, the ADMT uses the SidHistory function or refer to the migrated user to update the resource, allowing the user to keep the user's migration access, such as files, sharing, and applications. This feature allows security structures (permission and reject access to resources), and conveniently migrate it into new domains. Users maintain access to Exchange resources. If you need to update security permissions on an Exchange mailbox, you can use the ADMT to implement this process using the ADMT. Also migrate the service account. ADMT also migrates the service account. Many applications (such as Microsoft Exchange) use service accounts, running services with the same set of credentials on some network computers. Place the object in the OU. The ADMT also allows you to migrate selected users, groups, or computers to OUs of the target domain in addition to the Windows NT resource domain into the Active Directory OU. Then, use the Windows 2000 function to manage these OUs, for example, you can set a group policy configuration settings for a set of computers in the specified OU. Processing trust relationship. The trust relationship connects two domains to enable users in the trusted domain to access resources in the trust domain. In the migration process, you must maintain access to resources and must establish the same trust relationship as the source field in the target domain. Use the Trust Migration Wizard to complete this process - it compares the trust relationship in the source domain with the trust relationship between the target domain and then creates any trust relationships in the source field in the target domain. Use a new unified group. During the internal migration of the forest (ie, migration between the two Windows 2000 domains in the same forest directory), when the global group is migrated from the original mode source field, the group is created as a unified group. This can include members that have not been migrated in the source domain. The global group only contains members in their own domains; unified groups can include members in any Windows 2000 domain in the forest directory. ADMT system requirements
Target domain. For the target domain, the ADMT can run on any computer that can run the Windows 2000 Server operating system. Source field. The source domain must run Windows 2000 or Windows NT 4.0. The main domain controller (PDC) of the Windows NT 4.0 source field must install SP4 or higher. The ADMT agent (installation on the source computer) can run on a computer running Windows NT 3.51 (with SP5), Windows NT 4.0 (with SP4 or higher) or Windows 2000.
