Import users and the Destination Server into the Dashboard for Windows SBS 2011 Essentials migration

  • Článek

Published: March 10, 2011

Updated: May 10, 2012

Applies To: Windows Small Business Server 2011 Essentials

After the replication has taken place, user names will appear in Active Directory Users and Computers, but they will not appear in the Windows SBS 2011 Essentials Dashboard. You can use Windows PowerShell commands to import user names and the Destination Server into the Dashboard, or you can use a script to automate the import process.

Important

Windows SBS 2003 supports up to 75 users, while Windows SBS 2011 Essentials only supports up to 25 users. Ensure that you move no more than 25 users to the Windows SBS 2011 Essentials server.

To re-create security groups

  1. On the Destination Server, click Start, click Administrative Tools, and then click Active Directory Users and Computers.

  2. In the navigation pane, expand <DomainName>, expand My Business, expand Users, and then expand SBSUsers.

  3. Right-click the right-hand panel, and click Create New Group. Type one of the following group names, click Security Group, and then click Create. Repeat this step to create the remainder of the following security groups. Set the scope for each group to Global.

    • RA_AllowAddInAccess

    • RA_AllowComputerAccess

    • RA_AllowDashboardAccess

    • RA_AllowHomePageLinks

    • RA_AllowNetworkAlertAccess

    • RA_AllowRemoteAccess

    • RA_AllowShareAccess

    • WSSUsers

Because the administrator account was migrated from the Source Server, by default it does not have memberships to the Windows SBS 2011 Essentials security groups. To add group memberships to the administrator account that you are using for migration, perform the following procedure.

To make the administrator a member of the security groups

  1. On the Destination Server, click Start, click Administrative Tools, and then click Active Directory Users and Computers.

  2. In the navigation pane, expand <DomainName>, expand My Business, expand Users, and then expand SBSUsers.

  3. Open the administrator account or accounts to which you want to assign membership.

  4. Click the tab Member of and add the following groups to the account:

    1. RA_AllowAddInAccess

    2. RA_AllowComputerAccess

    3. RA_AllowDashboardAccess

    4. RA_AllowHomePageLinks

    5. RA_AllowNetworkAlertAccess

    6. RA_AllowRemoteAccess

    7. RA_AllowShareAccess

To ensure that users can log on to Remote Web Access after the migration, you must add the Authenticated Users group to the Pre-Windows 2000 Compatible Access group.

To add the Authenticated Users group to the Pre-Windows 2000 Compatible Access group

  1. On the Destination Server, click Start, point to Administrative Tools, and then click Active Directory Users and Computers.

  2. In the navigation pane, expand <DomainName>, and then click the Builtin folder.

  3. In the details pane, right-click the Pre-Windows 2000 Compatible Access group, and then click Properties.

  4. On the Members tab, click Add.

  5. Type Authenticated Users, and then click OK.

To manually import user names into the Dashboard

  1. On the Destination Server, open a Command Prompt window as an administrator. For more information, see To open a Command Prompt window as an Administrator.

  2. Type cd “\Program Files\Windows Server\Bin”, and press ENTER.

  3. Type WssPowerShell.exe, and then press ENTER.

  4. Type Import-WssUser –Name <username>, and then press ENTER.

  5. Repeat the previous step for each user name that you want to import into the Dashboard.

To use a script to import user names into the Dashboard

  1. On the Destination Server, open Notepad and copy the following script into it:

    "Script to Import Active Directory Users to the Windows SBS 2011 Essentials Dashboard"

#load userObjectModel Assembly.
[Reflection.Assembly]::LoadWithPartialName("UserObjectModel") | out-null

#loading AD module.
try
{
.....import-module -name activedirectory
.....# "AD module imported"
}
catch 
{
"---- There was an error loading AD Module"
.....$_.exception | fl * -for
}

$users = get-aduser -filter *
$imported = $false;


foreach ($user in $users)
{
if($user.enabled)
{
.....$userMgmtMgr = New-Object Microsoft.WindowsServerSolutions.Users.UserMgmtManager
.....$userMgmtMgr.Connect()
.....
.....try
.....{
..........$userFromUserObjectModel = $userMgmtMgr.GetUser($user.sAMAccountName);
............."__user $($user.sAMAccountName) already imported";
..........   $imported=$true;
.....}
.....catch
.....{
.............$imported=$false;
.............if($_.Exception.InnerException -match "UserNotExist")
.............{
.................."__User $($user.sAMAccountName) not imported"
.............}
..........else
..........{
.................."__We hit an unexpected error"
..................$_.Exception
..........
.....}
.....if(!$imported)
.....{
..........
..........
.............$import= read-host "Do you want to import" $user.name " to the Dashboard [y]/[n]"
.............if($import -eq "y")
.............{
.................."__Importing user $($user.sAMAccountName).."
..................import-wssuser -name $user.samaccountname | out-null
..................if((get-wssuser -name $user.samaccountname).userstatus -eq "Enabled")
..................{
......................."__User $($user.sAMAccountName) successfully imported"
..................}
.............}
.....}
.....
.....
}
}

  2. Click File, and then click Save.

  3. Browse to any folder on your Destination Server, and type a file name with a .ps1 extension (for example, C:\importusers.ps1).

  4. For Save as type, choose All Files, and then click Save.

  5. Open a Command Prompt window as an administrator. For more information, see To open a Command Prompt window as an Administrator.

  6. Type cd “C:\Program Files\Windows Server\Bin” and press ENTER.

  7. Type WssPowerShell.exe, and then press ENTER.

  8. Type Set-ExecutionPolicy RemoteSigned, and then press ENTER.

  9. Type <path><filename> for the script file that you created (for example, C:\importusers.ps1), and then press ENTER.

  10. Type Set-ExecutionPolicy Restricted, and then press ENTER.

To import the Destination Server into the Dashboard

  1. Open a Command Prompt window as an administrator. For more information, see To open a Command Prompt window as an Administrator.

  2. Type cd “\Program Files\Windows Server\Bin” and press ENTER.

  3. Type WssPowerShell.exe, and then press ENTER.

  4. Type Add-WssLocalMachineCert, and then press ENTER.

  5. Reboot the Destination Server.

Next topic: Join computers to the new Windows SBS 2011 Essentials network

Previous topic: Transfer the global catalog to the Destination Server for Windows SBS 2011 migration