Does ADMT tool only work under Domain Admin, but not OU Admin leve

Discussion in 'Server Migration' started by Wilson Cheung, Jul 4, 2005.

  1. I am working on a lab now and want to use ADMT tool to move all user account
    from NT to Windows 2003 server. My account in Windows 2003 is set as a Domain
    Users and Administrator, but not a domain admin. I am delegated to Admin an
    OU, for example: Accounting. Shall I have to right to migrate user account
    under OU level? Or I must have Domain Admin right to do so? Thanks!!

    Wilson
     
    Wilson Cheung, Jul 4, 2005
    #1
    1. Advertisements

  2. Wilson Cheung

    Jason Tan Guest

    Hi Wilson,

    Thanks for posting!

    ADMT requires the following permissions to run properly:

    o Administrator rights in the source domain.
    o Administrator rights on each computer that you migrate.
    o Administrator rights on each computer on which you translate security.

    You must configure the source domain to trust the target domain.
    Optionally, the target may be configured to trust the source domain. While
    this may ease configuration, it is not required to finish the ADMT
    migration.

    Based on the above information, you do not need to make the migration
    account as member of Domain Admin group and you may want to make this
    account as member of Administrators group. Based on my test, it works fine.

    Hope the information helps. If there is anything that is unclear, please
    feel free to let me know.

    Thanks & Regards,

    Jason Tan

    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.








    --------------------
    | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    Admin leve
    | thread-index: AcWAZrI93ogPViISTPO5a0ry8PPvkQ==
    | X-WBNR-Posting-Host: 202.140.234.94
    | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    <>
    | Subject: Does ADMT tool only work under Domain Admin, but not OU Admin
    leve
    | Date: Mon, 4 Jul 2005 00:05:01 -0700
    | Lines: 7
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl
    microsoft.public.windows.server.migration:11051
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | I am working on a lab now and want to use ADMT tool to move all user
    account
    | from NT to Windows 2003 server. My account in Windows 2003 is set as a
    Domain
    | Users and Administrator, but not a domain admin. I am delegated to Admin
    an
    | OU, for example: Accounting. Shall I have to right to migrate user
    account
    | under OU level? Or I must have Domain Admin right to do so? Thanks!!
    |
    | Wilson
    |
     
    Jason Tan, Jul 4, 2005
    #2
    1. Advertisements

  3. Hello Jason,

    As you explained to me. You mean that not only "Domain-Admin" account can
    use ADMT, but also "Administrator" account in target domain can use ADMT to
    migrate, is that right?

    On the other hand, I am using an "Administrator" account under a OU, not
    under the domain. Can I use ADMT to migrate? Thanks!!


    Wilson
     
    Wilson Cheung, Jul 5, 2005
    #3
  4. Wilson Cheung

    Jason Tan Guest

    Hi Wilson,

    Q: You mean that not only "Domain-Admin" account can use ADMT, but also
    "Administrator" account in target domain can use ADMT to migrate, is that
    right?

    A: the "Administrator" account which I indicated means that the account is
    a member of Win2k3 "Domain Users" Group and WinNT "Administrators" Group.

    Q: On the other hand, I am using an "Administrator" account under an OU,
    not under the domain. Can I use ADMT to migrate? Thanks!!

    A: Yes, besides the "Administrator" account suits the requirement I
    mentioned above, it must have the administrative privilege of the OU. For
    instance, it can create user account in the OU.

    Note:¡¡If you require to migrate computer, the account should have
    administrative privilege on each computer that you migrate.

    If there is anything that is unclear, please feel free to let me know.

    Thanks & Regards,

    Jason Tan

    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    Admin
    | thread-index: AcWA/87Iq68MxClsR/eXUSxD8RimWA==
    | X-WBNR-Posting-Host: 202.140.234.94
    | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    <>
    | References: <>
    <>
    | Subject: RE: Does ADMT tool only work under Domain Admin, but not OU Admin
    | Date: Mon, 4 Jul 2005 18:21:02 -0700
    | Lines: 100
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl
    microsoft.public.windows.server.migration:11065
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hello Jason,
    |
    | As you explained to me. You mean that not only "Domain-Admin" account can
    | use ADMT, but also "Administrator" account in target domain can use ADMT
    to
    | migrate, is that right?
    |
    | On the other hand, I am using an "Administrator" account under a OU, not
    | under the domain. Can I use ADMT to migrate? Thanks!!
    |
    |
    | Wilson
    |
    | "Jason Tan (MSFT)" wrote:
    |
    | > Hi Wilson,
    | >
    | > Thanks for posting!
    | >
    | > ADMT requires the following permissions to run properly:
    | >
    | > o Administrator rights in the source domain.
    | > o Administrator rights on each computer that you migrate.
    | > o Administrator rights on each computer on which you translate security.
    | >
    | > You must configure the source domain to trust the target domain.
    | > Optionally, the target may be configured to trust the source domain.
    While
    | > this may ease configuration, it is not required to finish the ADMT
    | > migration.
    | >
    | > Based on the above information, you do not need to make the migration
    | > account as member of Domain Admin group and you may want to make this
    | > account as member of Administrators group. Based on my test, it works
    fine.
    | >
    | > Hope the information helps. If there is anything that is unclear,
    please
    | > feel free to let me know.
    | >
    | > Thanks & Regards,
    | >
    | > Jason Tan
    | >
    | > Microsoft Online Partner Support
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | >
    | > When responding to posts, please "Reply to Group" via your newsreader
    so
    | > that others may learn and benefit from your issue.
    | >
    | > =====================================================
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | >
    | >
    | >
    | >
    | >
    | >
    | >
    | > --------------------
    | > | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    | > Admin leve
    | > | thread-index: AcWAZrI93ogPViISTPO5a0ry8PPvkQ==
    | > | X-WBNR-Posting-Host: 202.140.234.94
    | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    | > <>
    | > | Subject: Does ADMT tool only work under Domain Admin, but not OU
    Admin
    | > leve
    | > | Date: Mon, 4 Jul 2005 00:05:01 -0700
    | > | Lines: 7
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.migration
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: TK2MSFTNGXA01.phx.gbl
    | > microsoft.public.windows.server.migration:11051
    | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > |
    | > | I am working on a lab now and want to use ADMT tool to move all user
    | > account
    | > | from NT to Windows 2003 server. My account in Windows 2003 is set as
    a
    | > Domain
    | > | Users and Administrator, but not a domain admin. I am delegated to
    Admin
    | > an
    | > | OU, for example: Accounting. Shall I have to right to migrate user
    | > account
    | > | under OU level? Or I must have Domain Admin right to do so? Thanks!!
    | > |
    | > | Wilson
    | > |
    | >
    | >
    |
     
    Jason Tan, Jul 5, 2005
    #4
  5. Hell Jason,

    Thanks for prompt reply. Your information gave me greatly useful.
    On the other hand, I want to consolidate all users folders and files from
    NT4 to Win2k3. I used xcopy and copy all files and folders to the target
    Win2k3. Of course I set the parameter for copy attributes and permission.
    Does ADMT provides a feature that can consolidate all folders which is
    including all share permission? Thanks!

    Wilson
     
    Wilson Cheung, Jul 5, 2005
    #5
  6. Wilson Cheung

    Jason Tan Guest

    Hi Wilson,

    ADMT does not have copy feature. I recommend you use RoboCopy tool to
    accomplish this goal. It can perform migration with permission. Please
    refer to the following article:

    RoboCopy.exe: Robust File Copy Utility
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechR
    ef/ed34eee3-7dbd-44c6-8fb8-8b8b2c6f06dc.mspx

    Windows Server 2003 Resource Kit Tools
    http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-
    96ee-b18c4790cffd&displaylang=en

    323275 - How to Use Robocopy to Copy Security Information Without Copying
    Any File Data
    http://support.microsoft.com/default.aspx?scid=kb;en-us;323275

    In addition, you also can perform the files migration with permission using
    FSMT. The detailed information, please refer to the following information.

    Microsoft File Server Migration Toolkit:
    http://go.microsoft.com/fwlink/?LinkId=26396

    Microsoft File Server Migration Toolkit 1.0
    http://www.microsoft.com/downloads/details.aspx?FamilyID=d00e3eae-930a-42b0-
    b595-66f462f5d87b&DisplayLang=en

    FAQ on FSMT:
    http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfst_faqs
    ..mspx

    White Paper:
    http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfst_over
    view.mspx

    Hope the information helps. If there is anything that is unclear, please
    feel free to let me know.

    Thanks & Regards,

    Jason Tan

    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    Admin
    | thread-index: AcWBDRT8x/dSsY1uSE+koRgL+QYVQg==
    | X-WBNR-Posting-Host: 202.140.234.94
    | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    <>
    | References: <>
    <>
    <>
    <>
    | Subject: RE: Does ADMT tool only work under Domain Admin, but not OU Admin
    | Date: Mon, 4 Jul 2005 19:56:03 -0700
    | Lines: 190
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 8bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl
    microsoft.public.windows.server.migration:11069
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hell Jason,
    |
    | Thanks for prompt reply. Your information gave me greatly useful.
    | On the other hand, I want to consolidate all users folders and files from
    | NT4 to Win2k3. I used xcopy and copy all files and folders to the target
    | Win2k3. Of course I set the parameter for copy attributes and permission.
    | Does ADMT provides a feature that can consolidate all folders which is
    | including all share permission? Thanks!
    |
    | Wilson
    |
    | "Jason Tan (MSFT)" wrote:
    |
    | > Hi Wilson,
    | >
    | > Q: You mean that not only "Domain-Admin" account can use ADMT, but also
    | > "Administrator" account in target domain can use ADMT to migrate, is
    that
    | > right?
    | >
    | > A: the "Administrator" account which I indicated means that the account
    is
    | > a member of Win2k3 "Domain Users" Group and WinNT "Administrators"
    Group.
    | >
    | > Q: On the other hand, I am using an "Administrator" account under an
    OU,
    | > not under the domain. Can I use ADMT to migrate? Thanks!!
    | >
    | > A: Yes, besides the "Administrator" account suits the requirement I
    | > mentioned above, it must have the administrative privilege of the OU.
    For
    | > instance, it can create user account in the OU.
    | >
    | > Note:¡¡If you require to migrate computer, the account should have
    | > administrative privilege on each computer that you migrate.
    | >
    | > If there is anything that is unclear, please feel free to let me know.
    | >
    | > Thanks & Regards,
    | >
    | > Jason Tan
    | >
    | > Microsoft Online Partner Support
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | >
    | > When responding to posts, please "Reply to Group" via your newsreader
    so
    | > that others may learn and benefit from your issue.
    | >
    | > =====================================================
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    | > Admin
    | > | thread-index: AcWA/87Iq68MxClsR/eXUSxD8RimWA==
    | > | X-WBNR-Posting-Host: 202.140.234.94
    | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    | > <>
    | > | References: <>
    | > <>
    | > | Subject: RE: Does ADMT tool only work under Domain Admin, but not OU
    Admin
    | > | Date: Mon, 4 Jul 2005 18:21:02 -0700
    | > | Lines: 100
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.migration
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: TK2MSFTNGXA01.phx.gbl
    | > microsoft.public.windows.server.migration:11065
    | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > |
    | > | Hello Jason,
    | > |
    | > | As you explained to me. You mean that not only "Domain-Admin" account
    can
    | > | use ADMT, but also "Administrator" account in target domain can use
    ADMT
    | > to
    | > | migrate, is that right?
    | > |
    | > | On the other hand, I am using an "Administrator" account under a OU,
    not
    | > | under the domain. Can I use ADMT to migrate? Thanks!!
    | > |
    | > |
    | > | Wilson
    | > |
    | > | "Jason Tan (MSFT)" wrote:
    | > |
    | > | > Hi Wilson,
    | > | >
    | > | > Thanks for posting!
    | > | >
    | > | > ADMT requires the following permissions to run properly:
    | > | >
    | > | > o Administrator rights in the source domain.
    | > | > o Administrator rights on each computer that you migrate.
    | > | > o Administrator rights on each computer on which you translate
    security.
    | > | >
    | > | > You must configure the source domain to trust the target domain.
    | > | > Optionally, the target may be configured to trust the source
    domain.
    | > While
    | > | > this may ease configuration, it is not required to finish the ADMT
    | > | > migration.
    | > | >
    | > | > Based on the above information, you do not need to make the
    migration
    | > | > account as member of Domain Admin group and you may want to make
    this
    | > | > account as member of Administrators group. Based on my test, it
    works
    | > fine.
    | > | >
    | > | > Hope the information helps. If there is anything that is unclear,
    | > please
    | > | > feel free to let me know.
    | > | >
    | > | > Thanks & Regards,
    | > | >
    | > | > Jason Tan
    | > | >
    | > | > Microsoft Online Partner Support
    | > | > Get Secure! - www.microsoft.com/security
    | > | >
    | > | > =====================================================
    | > | >
    | > | > When responding to posts, please "Reply to Group" via your
    newsreader
    | > so
    | > | > that others may learn and benefit from your issue.
    | > | >
    | > | > =====================================================
    | > | > This posting is provided "AS IS" with no warranties, and confers no
    | > rights.
    | > | >
    | > | >
    | > | >
    | > | >
    | > | >
    | > | >
    | > | >
    | > | >
    | > | > --------------------
    | > | > | Thread-Topic: Does ADMT tool only work under Domain Admin, but
    not OU
    | > | > Admin leve
    | > | > | thread-index: AcWAZrI93ogPViISTPO5a0ry8PPvkQ==
    | > | > | X-WBNR-Posting-Host: 202.140.234.94
    | > | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    | > | > <>
    | > | > | Subject: Does ADMT tool only work under Domain Admin, but not OU
    | > Admin
    | > | > leve
    | > | > | Date: Mon, 4 Jul 2005 00:05:01 -0700
    | > | > | Lines: 7
    | > | > | Message-ID: <>
    | > | > | MIME-Version: 1.0
    | > | > | Content-Type: text/plain;
    | > | > | charset="Utf-8"
    | > | > | Content-Transfer-Encoding: 7bit
    | > | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | > | Content-Class: urn:content-classes:message
    | > | > | Importance: normal
    | > | > | Priority: normal
    | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | > | Newsgroups: microsoft.public.windows.server.migration
    | > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | > | Xref: TK2MSFTNGXA01.phx.gbl
    | > | > microsoft.public.windows.server.migration:11051
    | > | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > | > |
    | > | > | I am working on a lab now and want to use ADMT tool to move all
    user
    | > | > account
    | > | > | from NT to Windows 2003 server. My account in Windows 2003 is set
    as
    | > a
    | > | > Domain
    | > | > | Users and Administrator, but not a domain admin. I am delegated
    to
    | > Admin
    | > | > an
    | > | > | OU, for example: Accounting. Shall I have to right to migrate
    user
    | > | > account
    | > | > | under OU level? Or I must have Domain Admin right to do so?
    Thanks!!
    | > | > |
    | > | > | Wilson
    | > | > |
    | > | >
    | > | >
    | > |
    | >
    | >
    |
     
    Jason Tan, Jul 5, 2005
    #6
  7. Hello Jason,

    Thank you for your explaination in detail again.

    One more thing I would like to ask, does SID maps to Win2k3 (traget machine)
    by using Robocopy.exe? If it doesn't, I will need to use FSMT, am I correct?
    Thanks!

    B.regards,
    Wilson Cheung
     
    Wilson Cheung, Jul 5, 2005
    #7
  8. Wilson Cheung

    Jason Tan Guest

    Hi Wilson,

    Thanks for update!

    FSMT is used to migrate files between two domain. Both Robocopy and FSMT
    can migrate files with Security information(Permission). So, in your
    scenario, you may user either of them. Note: Robocopy is command-line tool
    and FSMT is UI tool.

    If there is anything that is unclear, please feel free to let me know.

    Thanks & Regards,

    Jason Tan

    Microsoft Online Partner Support
    Get Secure! - www.microsoft.com/security

    =====================================================

    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.

    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.




    --------------------
    | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    Admin
    | thread-index: AcWBKf8BUSXMXOVRTqKsfnskR5tCgQ==
    | X-WBNR-Posting-Host: 202.140.234.94
    | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    <>
    | References: <>
    <>
    <>
    <>
    <>
    <>
    | Subject: RE: Does ADMT tool only work under Domain Admin, but not OU Admin
    | Date: Mon, 4 Jul 2005 23:23:02 -0700
    | Lines: 315
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 8bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: TK2MSFTNGXA01.phx.gbl
    microsoft.public.windows.server.migration:11073
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hello Jason,
    |
    | Thank you for your explaination in detail again.
    |
    | One more thing I would like to ask, does SID maps to Win2k3 (traget
    machine)
    | by using Robocopy.exe? If it doesn't, I will need to use FSMT, am I
    correct?
    | Thanks!
    |
    | B.regards,
    | Wilson Cheung
    |
    |
    |
    | "Jason Tan (MSFT)" wrote:
    |
    | > Hi Wilson,
    | >
    | > ADMT does not have copy feature. I recommend you use RoboCopy tool to
    | > accomplish this goal. It can perform migration with permission. Please
    | > refer to the following article:
    | >
    | > RoboCopy.exe: Robust File Copy Utility
    | >
    http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/TechR
    | > ef/ed34eee3-7dbd-44c6-8fb8-8b8b2c6f06dc.mspx
    | >
    | > Windows Server 2003 Resource Kit Tools
    | >
    http://www.microsoft.com/downloads/details.aspx?FamilyID=9d467a69-57ff-4ae7-
    | > 96ee-b18c4790cffd&displaylang=en
    | >
    | > 323275 - How to Use Robocopy to Copy Security Information Without
    Copying
    | > Any File Data
    | > http://support.microsoft.com/default.aspx?scid=kb;en-us;323275
    | >
    | > In addition, you also can perform the files migration with permission
    using
    | > FSMT. The detailed information, please refer to the following
    information.
    | >
    | > Microsoft File Server Migration Toolkit:
    | > http://go.microsoft.com/fwlink/?LinkId=26396
    | >
    | > Microsoft File Server Migration Toolkit 1.0
    | >
    http://www.microsoft.com/downloads/details.aspx?FamilyID=d00e3eae-930a-42b0-
    | > b595-66f462f5d87b&DisplayLang=en
    | >
    | > FAQ on FSMT:
    | >
    http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfst_faqs
    | > .mspx
    | >
    | > White Paper:
    | >
    http://www.microsoft.com/windowsserver2003/upgrading/nt4/tooldocs/msfst_over
    | > view.mspx
    | >
    | > Hope the information helps. If there is anything that is unclear,
    please
    | > feel free to let me know.
    | >
    | > Thanks & Regards,
    | >
    | > Jason Tan
    | >
    | > Microsoft Online Partner Support
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | >
    | > When responding to posts, please "Reply to Group" via your newsreader
    so
    | > that others may learn and benefit from your issue.
    | >
    | > =====================================================
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: Does ADMT tool only work under Domain Admin, but not OU
    | > Admin
    | > | thread-index: AcWBDRT8x/dSsY1uSE+koRgL+QYVQg==
    | > | X-WBNR-Posting-Host: 202.140.234.94
    | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    | > <>
    | > | References: <>
    | > <>
    | > <>
    | > <>
    | > | Subject: RE: Does ADMT tool only work under Domain Admin, but not OU
    Admin
    | > | Date: Mon, 4 Jul 2005 19:56:03 -0700
    | > | Lines: 190
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 8bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.migration
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: TK2MSFTNGXA01.phx.gbl
    | > microsoft.public.windows.server.migration:11069
    | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > |
    | > | Hell Jason,
    | > |
    | > | Thanks for prompt reply. Your information gave me greatly useful.
    | > | On the other hand, I want to consolidate all users folders and files
    from
    | > | NT4 to Win2k3. I used xcopy and copy all files and folders to the
    target
    | > | Win2k3. Of course I set the parameter for copy attributes and
    permission.
    | > | Does ADMT provides a feature that can consolidate all folders which
    is
    | > | including all share permission? Thanks!
    | > |
    | > | Wilson
    | > |
    | > | "Jason Tan (MSFT)" wrote:
    | > |
    | > | > Hi Wilson,
    | > | >
    | > | > Q: You mean that not only "Domain-Admin" account can use ADMT, but
    also
    | > | > "Administrator" account in target domain can use ADMT to migrate,
    is
    | > that
    | > | > right?
    | > | >
    | > | > A: the "Administrator" account which I indicated means that the
    account
    | > is
    | > | > a member of Win2k3 "Domain Users" Group and WinNT "Administrators"
    | > Group.
    | > | >
    | > | > Q: On the other hand, I am using an "Administrator" account under
    an
    | > OU,
    | > | > not under the domain. Can I use ADMT to migrate? Thanks!!
    | > | >
    | > | > A: Yes, besides the "Administrator" account suits the requirement I
    | > | > mentioned above, it must have the administrative privilege of the
    OU.
    | > For
    | > | > instance, it can create user account in the OU.
    | > | >
    | > | > Note:¡¡If you require to migrate computer, the account should
    have
    | > | > administrative privilege on each computer that you migrate.
    | > | >
    | > | > If there is anything that is unclear, please feel free to let me
    know.
    | > | >
    | > | > Thanks & Regards,
    | > | >
    | > | > Jason Tan
    | > | >
    | > | > Microsoft Online Partner Support
    | > | > Get Secure! - www.microsoft.com/security
    | > | >
    | > | > =====================================================
    | > | >
    | > | > When responding to posts, please "Reply to Group" via your
    newsreader
    | > so
    | > | > that others may learn and benefit from your issue.
    | > | >
    | > | > =====================================================
    | > | > This posting is provided "AS IS" with no warranties, and confers no
    | > rights.
    | > | >
    | > | > --------------------
    | > | > | Thread-Topic: Does ADMT tool only work under Domain Admin, but
    not OU
    | > | > Admin
    | > | > | thread-index: AcWA/87Iq68MxClsR/eXUSxD8RimWA==
    | > | > | X-WBNR-Posting-Host: 202.140.234.94
    | > | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    | > | > <>
    | > | > | References: <>
    | > | > <>
    | > | > | Subject: RE: Does ADMT tool only work under Domain Admin, but not
    OU
    | > Admin
    | > | > | Date: Mon, 4 Jul 2005 18:21:02 -0700
    | > | > | Lines: 100
    | > | > | Message-ID: <>
    | > | > | MIME-Version: 1.0
    | > | > | Content-Type: text/plain;
    | > | > | charset="Utf-8"
    | > | > | Content-Transfer-Encoding: 7bit
    | > | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | > | Content-Class: urn:content-classes:message
    | > | > | Importance: normal
    | > | > | Priority: normal
    | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | > | Newsgroups: microsoft.public.windows.server.migration
    | > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | > | Xref: TK2MSFTNGXA01.phx.gbl
    | > | > microsoft.public.windows.server.migration:11065
    | > | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > | > |
    | > | > | Hello Jason,
    | > | > |
    | > | > | As you explained to me. You mean that not only "Domain-Admin"
    account
    | > can
    | > | > | use ADMT, but also "Administrator" account in target domain can
    use
    | > ADMT
    | > | > to
    | > | > | migrate, is that right?
    | > | > |
    | > | > | On the other hand, I am using an "Administrator" account under a
    OU,
    | > not
    | > | > | under the domain. Can I use ADMT to migrate? Thanks!!
    | > | > |
    | > | > |
    | > | > | Wilson
    | > | > |
    | > | > | "Jason Tan (MSFT)" wrote:
    | > | > |
    | > | > | > Hi Wilson,
    | > | > | >
    | > | > | > Thanks for posting!
    | > | > | >
    | > | > | > ADMT requires the following permissions to run properly:
    | > | > | >
    | > | > | > o Administrator rights in the source domain.
    | > | > | > o Administrator rights on each computer that you migrate.
    | > | > | > o Administrator rights on each computer on which you translate
    | > security.
    | > | > | >
    | > | > | > You must configure the source domain to trust the target
    domain.
    | > | > | > Optionally, the target may be configured to trust the source
    | > domain.
    | > | > While
    | > | > | > this may ease configuration, it is not required to finish the
    ADMT
    | > | > | > migration.
    | > | > | >
    | > | > | > Based on the above information, you do not need to make the
    | > migration
    | > | > | > account as member of Domain Admin group and you may want to
    make
    | > this
    | > | > | > account as member of Administrators group. Based on my test, it
    | > works
    | > | > fine.
    | > | > | >
    | > | > | > Hope the information helps. If there is anything that is
    unclear,
    | > | > please
    | > | > | > feel free to let me know.
    | > | > | >
    | > | > | > Thanks & Regards,
    | > | > | >
    | > | > | > Jason Tan
    | > | > | >
    | > | > | > Microsoft Online Partner Support
    | > | > | > Get Secure! - www.microsoft.com/security
    | > | > | >
    | > | > | > =====================================================
    | > | > | >
    | > | > | > When responding to posts, please "Reply to Group" via your
    | > newsreader
    | > | > so
    | > | > | > that others may learn and benefit from your issue.
    | > | > | >
    | > | > | > =====================================================
    | > | > | > This posting is provided "AS IS" with no warranties, and
    confers no
    | > | > rights.
    | > | > | >
    | > | > | >
    | > | > | >
    | > | > | >
    | > | > | >
    | > | > | >
    | > | > | >
    | > | > | >
    | > | > | > --------------------
    | > | > | > | Thread-Topic: Does ADMT tool only work under Domain Admin,
    but
    | > not OU
    | > | > | > Admin leve
    | > | > | > | thread-index: AcWAZrI93ogPViISTPO5a0ry8PPvkQ==
    | > | > | > | X-WBNR-Posting-Host: 202.140.234.94
    | > | > | > | From: "=?Utf-8?B?V2lsc29uIENoZXVuZw==?="
    | > | > | > <>
    | > | > | > | Subject: Does ADMT tool only work under Domain Admin, but not
    OU
    | > | > Admin
    | > | > | > leve
    | > | > | > | Date: Mon, 4 Jul 2005 00:05:01 -0700
    | > | > | > | Lines: 7
    | > | > | > | Message-ID:
    <>
    | > | > | > | MIME-Version: 1.0
    | > | > | > | Content-Type: text/plain;
    | > | > | > | charset="Utf-8"
    | > | > | > | Content-Transfer-Encoding: 7bit
    | > | > | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | > | > | Content-Class: urn:content-classes:message
    | > | > | > | Importance: normal
    | > | > | > | Priority: normal
    | > | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | > | > | Newsgroups: microsoft.public.windows.server.migration
    | > | > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
    | > | > | > | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | > | > | Xref: TK2MSFTNGXA01.phx.gbl
    | > | > | > microsoft.public.windows.server.migration:11051
    | > | > | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > | > | > |
    | > | > | > | I am working on a lab now and want to use ADMT tool to move
    all
    | > user
    | > | > | > account
    | > | > | > | from NT to Windows 2003 server. My account in Windows 2003 is
    set
    | > as
    | > | > a
    | > | > | > Domain
    | > | > | > | Users and Administrator, but not a domain admin. I am
    delegated
    | > to
    | > | > Admin
    | > | > | > an
    | > | > | > | OU, for example: Accounting. Shall I have to right to migrate
    | > user
    | > | > | > account
    | > | > | > | under OU level? Or I must have Domain Admin right to do so?
    | > Thanks!!
    | > | > | > |
    | > | > | > | Wilson
    | > | > | > |
    | > | > | >
    | > | > | >
    | > | > |
    | > | >
    | > | >
    | > |
    | >
    |
     
    Jason Tan, Jul 5, 2005
    #8
  9. Hi Jason,

    In my experiment by using FSMT, it is more powerful since it can migrate
    Shares to the target machine. Robocopy.exe is unable to do so. Thanks Jason
    again!

    Wilson Cheung
     
    Wilson Cheung, Jul 5, 2005
    #9
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.