Do I need to migrate computer account at same time as user account

Are their any issues with migrating just user accounts to a target forest but
leaving their computer accounts in the source forest? The computers will
continue authenticating and applying policies for their own forest but the
actual migrated users would be logging on and authenticating to a different
forest over a trust relationship. Although this may well work; is this
really a supported configuration and what potentiol issues are there?

I'm sure you would normally want to migrate both user and computer accounts
to the target forest at the same time but in our case management wish to
delay computer accouint migration until a standard common desktop can be
deployed.

Thanks in advance

J Tinson wrote:
> Are their any issues with migrating just user accounts to a target
> forest but leaving their computer accounts in the source forest? The
> computers will continue authenticating and applying policies for
> their own forest but the actual migrated users would be logging on
> and authenticating to a different forest over a trust relationship.
> Although this may well work; is this really a supported configuration
> and what potentiol issues are there?
>
> I'm sure you would normally want to migrate both user and computer
> accounts to the target forest at the same time but in our case
> management wish to delay computer accouint migration until a standard
> common desktop can be deployed.
>
> Thanks in advance

Check in the admt.chm file for details. Interforest migrations create a new
username with the same attributes (different SID) in the new forest.
Depending upon the trust setup between the two domains users may log on to
the workstations in the old domain with the new domain username.

Often migrations are users and groups first, then computers, and the
resources and security translation. Much depends upon your migration methods
and goals.


--
/kj