question

Andy-7143 avatar image
0 Votes"
Andy-7143 asked Andy-7143 edited

Migrate Source Domain(old) to Target Domain(new) with ADMT 3.2

Old DC01(IP:10.0.0.1) OS Windows 2016
Old DC02(IP:10.0.0.2) OS Windows 2016
Old DC03(IP:10.0.0.3) OS Windows 2019
Domain Name: OldDomain.com
Client: Windows 10 (Version 20h2)


New DC01(IP:172.16.0.1) OS Windows 2019
New DC02(IP:172.16.0.2) OS Windows 2019
Domain Name: NewDomain.com


SQL Express 2008 R2 SP2
SQL Express 2008 R2 SP3 Update


ADMT 3.2 (For Service Account/Group/User/Computer Migration)
PSE3.1 (For Password Migration)



All DC forest level and domain functional level are Windows 2016
I will share experience with you step by step

windows-serverwindows-server-migration
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Andy-7143 avatar image
0 Votes"
Andy-7143 answered Andy-7143 edited

ADMT Domain Group Migration

There is a sequence for doing this though, they have been migrated in the correct order;

  • First: Universal Groups

  • Second: Global Groups

  • Third: Domain Local Groups

To locate what types of groups you have, and what they are called, run the following commands;

PowerShell Display all Universal Groups





import-module activedirectory
Get-ADGroup –LDAPFilter "(&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=-2147483640))"





PowerShell Display all Global Groups





import-module activedirectory
Get-ADGroup –LDAPFilter "(&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=-2147483646))"





PowerShell Display all Domain Local Groups





import-module activedirectory
Get-ADGroup –LDAPFilter "(&(objectCategory=group)(groupType:1.2.840.113556.1.4.803:=-2147483644))"




87766-1admt.jpg
87720-2welcome.jpg
87659-3domain-selection.jpg
87727-4dc.jpg
87660-group-name.jpg
87801-ou.jpg
87792-7sid.jpg
87802-8user-account.jpg
87772-9object-property-exclusion.jpg
87706-10conflict-management.jpg
87755-11finish.jpg
87756-12migration-progress.jpg

ADMT Migrating Groups

How about Distribution Groups? These are created by Microsoft Exchange, if you need to migrate Distribution groups then you can convert them to domain local security groups, then migrate them with ADMT. Note: You may need to fix their Email address manually, that depends on your new email deployment in newdomain.com




Converting Distribution Groups to Security Groups
Run the following commands



$dlGrps = Get-AdGroup -Filter { name -like "GROUP-NAME -AND GroupCategory -eq "Distribution"} | select -exp SamAccountName

foreach ($dl in $dlGrps) { Set-AdGroup $dl -GroupCategory Security }






1admt.jpg (49.6 KiB)
2welcome.jpg (53.8 KiB)
4dc.jpg (36.5 KiB)
7sid.jpg (53.1 KiB)
11finish.jpg (70.1 KiB)
group-name.jpg (47.7 KiB)
ou.jpg (46.8 KiB)
group-name.jpg (47.7 KiB)
ou.jpg (46.8 KiB)
7sid.jpg (53.1 KiB)
8user-account.jpg (50.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Andy-7143 avatar image
0 Votes"
Andy-7143 answered Andy-7143 edited

ADMT User Migration
Please refer Service Account(user) part

88049-1admt.jpg
88091-5add.jpg
88016-6ou.jpg
88017-7password.jpg
88082-20user-account.jpg
88000-21user-options.jpg

![88069-25migration-progress.jpg][8]

You can see user will added to relative groups automatically

88347-26user-and-group.jpg

ADMT Security Translation
87997-security.jpg
87814-1welcome.jpg


87743-2sto.jpg


87815-3domain-selection.jpg


87816-4dc.jpg


87647-4computer-selection.jpg

Of course we can choose more than one computer at the same time

87804-5computer.jpg
87805-6translate.jpg
87794-7add.jpg
87680-8finish.jpg
87821-9pre-check.jpg
87822-10pre-check-and-agent.jpg



1welcome.jpg (50.1 KiB)
2sto.jpg (44.7 KiB)
4dc.jpg (36.5 KiB)
5computer.jpg (51.1 KiB)
6translate.jpg (42.7 KiB)
7add.jpg (51.9 KiB)
8finish.jpg (65.3 KiB)
9pre-check.jpg (84.2 KiB)
security.jpg (58.1 KiB)
1admt.jpg (46.9 KiB)
5add.jpg (46.0 KiB)
6ou.jpg (45.7 KiB)
7password.jpg (53.7 KiB)
20user-account.jpg (48.1 KiB)
21user-options.jpg (48.9 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Andy-7143 avatar image
0 Votes"
Andy-7143 answered

ADMT Computer Migration

87898-computer.jpg
87899-1welcome.jpg
87963-4dc.jpg
87900-3computer.jpg
87991-4admt-computer.jpg
87992-5ou.jpg
87993-5translate.jpg
87800-6add.jpg
87955-7reboot-time.jpg
88001-8ope.jpg
87972-9conflict-management.jpg
87956-10finish.jpg
87973-11completed.jpg
87957-12pre-check.jpg
87958-13post-check.jpg



computer.jpg (57.7 KiB)
1welcome.jpg (53.1 KiB)
4dc.jpg (36.5 KiB)
3computer.jpg (41.2 KiB)
4admt-computer.jpg (39.8 KiB)
5ou.jpg (42.7 KiB)
5translate.jpg (43.8 KiB)
6add.jpg (50.3 KiB)
7reboot-time.jpg (33.2 KiB)
8ope.jpg (53.0 KiB)
10finish.jpg (65.7 KiB)
11completed.jpg (34.0 KiB)
12pre-check.jpg (66.6 KiB)
13post-check.jpg (89.7 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Andy-7143 avatar image
0 Votes"
Andy-7143 answered Andy-7143 rolled back

87860-announcement.jpg



announcement.jpg (70.2 KiB)
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.