Initializing ADMT by Running a Test Migration

  • Article

Applies To: Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Windows Server 2012 R2

Applies to: Active Directory Migration Tool 3.2 (ADMT 3.2)

Start the Active Directory Migration Tool (ADMT) by running a test migration of a global group, and select the option named Migrate Group SIDs to target domain. In order to migrate security identifier (SID) history, you need to complete the preparation tasks as described in Configuring the Source and Target Domains for SID History Migration. If you did not previously configure the source and target domains to migrate the SID history, ADMT prompts you and provides an option to have the following tasks completed automatically.

  • Creates a local group, source_domain$$$, in the source domain, which is used to audit SID history operations. Do not add members to this group; if you do, SID history migration will fail.

  • Enables audit policies in the source and target domains.

Warning

ADMT does not automatically enable auditing for directory service access, which is required in order to migrate SID history to or from a domain that has domain controllers that run Windows Server 2008 or later.

Use the following procedure to initialize ADMT.

To initialize ADMT by running a test migration of a global group

  1. In the ADMT console, use the Group Account Migration Wizard by completing the steps in the following table. Accept default settings when no information is specified.

    Wizard page Action

    Domain Selection

    Under Source, in the Domain drop-down list, type or select the NetBIOS or Domain Name System (DNS) name of the source domain. In the Domain controller drop-down list, type or select the name of the domain controller, or select Any domain controller.

    Under Target, in the Domain drop-down list, type or select the NetBIOS or DNS name of the target domain. In the Domain controller drop-down list, type or select the name of the domain controller, or select Any domain controller, and then click Next.

    Group Selection

    Click Select groups from domain, and then click Next. On the Group Selection page, click Add to select the groups in the source domain that you want to migrate, click OK, and then click Next.

    Or

    Click Read objects from an include file, and then click Next. Type the location of the include file, and then click Next.

    Organizational Unit Selection

    Type the name of the OU, or click Browse.

    In the Browse for Container dialog box, find the container in the target domain that you want to move the global groups into, and then click OK.

    Group Options

    Select the Migrate Group SIDs to target domain check box.

    Make sure that all other options are not selected.

    User Account

    Type the user name, password, and domain of an account that has administrative rights in the source domain.

    Conflict Management

    Click Do not migrate source object if a conflict is detected in the target domain.

  2. When the wizard has finished running, click View Log, and then review the migration log for any errors.