Thanks Meinolf. Thats a lot of info...
was a lil confused
I have indeed started reviewing the tool and, i am already confused about
the Security Translation. When you are
migrating a workstation, the security translation is automatically done
based on the Objects Selected for Translation and Security Translation
Options selected and the in the computer migration wizard. My understanding
is that during this phenomenon, the ACL on the objects selected (files &
folders, local groups, printers, shares, user profiles, user rights) will be
updated with the corresponding target domain security principal. Is that
correct? Now this is the same procedure followed for servers also?
In that case why do we need a seperate Security Translation Wizard? Is it
for a cleanup process? I mean removing the the old security identifiers from
the ACL?
"Meinolf Weber" wrote:
> Hello Kathy,
>
> See inline. I would use the 3.1 version if, ofcourse you need a 2008 server
> to run it.
> http://blogs.dirteam.com/blogs/jorge...rver-2008.aspx
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>
> > Hello,
> >
> > We are looking at using ADMT for our migrations and here are few
> > questions that i need your assistance on:
> >
> > a.. Is delegation possible with ADMT? basing on the object type. For
> > E.g. Can i delegate rights to an admin to migrate only computers? If
> > yes, i am thinking that the delegated admin would need Full Control
> > permissions on all computer objects in the source domain and like wise
> > have Full Control permissions on the Target domain OU which will be
> > containing the migrated computers. Would this work fine? or are there
> > any recommendations here? I have refered the ADMT Guide which has got
> > infor which is more generalized. Would appreciate if you can provide
> > some specific granular permissions.
>
> See chapter "Establishing Migration Accounts" in:
> http://www.microsoft.com/downloads/d...displaylang=en
>
> http://technet.microsoft.com/en-us/l.../cc776438.aspx
>
> See chapter "Establishing Migration Accounts for Your Migration" in:
> http://www.microsoft.com/downloads/d...displaylang=en
>
> > b.. What are the most common issues that you have come accross with
> > ADMT? Which either have known or un-known solutions? Something like
> > profile migration issues, resource access issues.. i dont know
>
> In ADMT v3.1 you have "Troubleshooting ADMT" chapter:
> http://www.microsoft.com/downloads/d...displaylang=en
>
> > c.. Is there any functional difference between ADMT v3.0 and ADMT
> > 3.1, i mean the way the migrations are done..basically from an
> > operations perspecitive.
>
> You need 3.1 if you have a 2008 Domain to migrate to,becasue 3.1 run only
> on 2008.
>
> > d.. In some of the posts that i have seen in this newsgroup there is
> > a mention of the recommended order of migration Global Groups >> Local
> > Groups >> Users >> Computers....at what stage of this order should we
> > migrate the Service Accounts? should they be done along with the users
> > and just before the servers?
>
> See chapter "Transitioning Service Accounts" in:
> http://www.microsoft.com/downloads/d...displaylang=en
>
> See chapter "Transitioning Service Accounts in Your Migration" in:
> http://www.microsoft.com/downloads/d...displaylang=en
>
>
>