Windows 2003 Migration Steps

Discussion in 'Server Migration' started by Garry, Nov 8, 2004.

  1. Garry

    Garry Guest

    Hi,
    We are in the process of Migrating Windows NT 4.0 domain to Windows 2003
    domain. We have already migrated few users, but can not go ahead for some
    issues. Is it advisable to migrate the File Servers, Application Servers etc.
    first before the rest of the users are migrated? The Microsoft recommended
    steps do not suggest this.
    Please advise
    Thanks

    Rgds,
    Garry
     
    Garry, Nov 8, 2004
    #1
    1. Advertisements

  2. Hello Garry,

    Thank you for your post.

    Question 1:
    -------------------

    We are in the process of Migrating Windows NT 4.0 domain to Windows 2003
    domain. We have already migrated few users, but can not go ahead for some
    issues. Is it advisable to migrate the File Servers, Application Servers
    etc.
    first before the rest of the users are migrated?

    [Answer]:

    Generally, we don't recommend you to migrate the File Servers, Application
    Servers before the users are completely migrated. Only if those users will
    be re-create in the new system. Those permissions and other settings will
    not take effect on those later migrated users.

    About those users cannot be migrated, please kindly let me know what
    happened during the migration. Did you receive any error message of the
    issue? We need to collect more related information before going further.

    I hope this helps. If you have any questions or concerns, please do not
    hesitate to let me know. I am happy to be of further assistance. Thank you
    for your time and cooperation!

    Sincerely,
    Carsyn Gu
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via
    your newsreader so that others may learn and benefit
    from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Windows 2003 Migration Steps
    | thread-index: AcTFdUC5WOHqhz92T+S0792GoDNwEg==
    | X-WBNR-Posting-Host: 194.131.151.233
    | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | Subject: Windows 2003 Migration Steps
    | Date: Mon, 8 Nov 2004 01:28:06 -0800
    | Lines: 11
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: cpmsftngxa10.phx.gbl microsoft.public.windows.server.migration:15075
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hi,
    | We are in the process of Migrating Windows NT 4.0 domain to Windows 2003
    | domain. We have already migrated few users, but can not go ahead for some
    | issues. Is it advisable to migrate the File Servers, Application Servers
    etc.
    | first before the rest of the users are migrated? The Microsoft
    recommended
    | steps do not suggest this.
    | Please advise
    | Thanks
    |
    | Rgds,
    | Garry
    |
     
    Carsyn Gu [MSFT], Nov 9, 2004
    #2
    1. Advertisements

  3. Garry

    Garry Guest

    Hi,

    Thanks for your kind help.
    We stopped the user migration just due to some application issues which do
    not wok on SID, but works on DomainName/UserName
    Otherwise, the user migration was perfectly fine with no issues
    So, we were thinking of migrating the Servers in the mean time.
    So, what will be the effects of following this method and the implications
    of that, as Microsoft does not documents anywheer about migrating the servers
    before the users.
    Please advise
    Thanks.

    Rgds,
    Garry

     
    Garry, Nov 9, 2004
    #3
  4. Garry

    Garry Guest

    Hi,
    One more query. Please elaborate as to what do you mean by those permissions
    and settings will not take effect on those later migrated users.
    Which settings do you mean here?
    Thanks once again.

    Rgds,
    Garry

     
    Garry, Nov 9, 2004
    #4
  5. Hi Garry,

    Thanks for your reply.

    All the permission on resource (files, privileges, objects) are related to
    user accounts. When ADMT is migrating these permission settings, it will
    try to check if these user accounts can be resolved. If we didn't migrate
    the user account, the accounts in the permission list cannot be resolved
    and caused the permission migration failure.

    Hope the information helps.

    Sincerely,
    Carsyn Gu
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via
    your newsreader so that others may learn and benefit
    from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Windows 2003 Migration Steps
    | thread-index: AcTGabejbqSUh5HxTUeGPYniSMS4xg==
    | X-WBNR-Posting-Host: 194.131.151.233
    | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | References: <>
    <>
    <>
    | Subject: RE: Windows 2003 Migration Steps
    | Date: Tue, 9 Nov 2004 06:38:02 -0800
    | Lines: 111
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: cpmsftngxa10.phx.gbl microsoft.public.windows.server.migration:15126
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hi,
    | One more query. Please elaborate as to what do you mean by those
    permissions
    | and settings will not take effect on those later migrated users.
    | Which settings do you mean here?
    | Thanks once again.
    |
    | Rgds,
    | Garry
    |
    | "Garry" wrote:
    |
    | > Hi,
    | >
    | > Thanks for your kind help.
    | > We stopped the user migration just due to some application issues which
    do
    | > not wok on SID, but works on DomainName/UserName
    | > Otherwise, the user migration was perfectly fine with no issues
    | > So, we were thinking of migrating the Servers in the mean time.
    | > So, what will be the effects of following this method and the
    implications
    | > of that, as Microsoft does not documents anywheer about migrating the
    servers
    | > before the users.
    | > Please advise
    | > Thanks.
    | >
    | > Rgds,
    | > Garry
    | >
    | > "Carsyn Gu [MSFT]" wrote:
    | >
    | > > Hello Garry,
    | > >
    | > > Thank you for your post.
    | > >
    | > > Question 1:
    | > > -------------------
    | > >
    | > > We are in the process of Migrating Windows NT 4.0 domain to Windows
    2003
    | > > domain. We have already migrated few users, but can not go ahead for
    some
    | > > issues. Is it advisable to migrate the File Servers, Application
    Servers
    | > > etc.
    | > > first before the rest of the users are migrated?
    | > >
    | > > [Answer]:
    | > >
    | > > Generally, we don't recommend you to migrate the File Servers,
    Application
    | > > Servers before the users are completely migrated. Only if those users
    will
    | > > be re-create in the new system. Those permissions and other settings
    will
    | > > not take effect on those later migrated users.
    | > >
    | > > About those users cannot be migrated, please kindly let me know what
    | > > happened during the migration. Did you receive any error message of
    the
    | > > issue? We need to collect more related information before going
    further.
    | > >
    | > > I hope this helps. If you have any questions or concerns, please do
    not
    | > > hesitate to let me know. I am happy to be of further assistance.
    Thank you
    | > > for your time and cooperation!
    | > >
    | > > Sincerely,
    | > > Carsyn Gu
    | > > Microsoft Online Partner Support
    | > >
    | > > Get Secure! - www.microsoft.com/security
    | > >
    | > > =====================================================
    | > > When responding to posts, please "Reply to Group" via
    | > > your newsreader so that others may learn and benefit
    | > > from your issue.
    | > > =====================================================
    | > >
    | > > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | > >
    | > > --------------------
    | > > | Thread-Topic: Windows 2003 Migration Steps
    | > > | thread-index: AcTFdUC5WOHqhz92T+S0792GoDNwEg==
    | > > | X-WBNR-Posting-Host: 194.131.151.233
    | > > | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | > > | Subject: Windows 2003 Migration Steps
    | > > | Date: Mon, 8 Nov 2004 01:28:06 -0800
    | > > | Lines: 11
    | > > | Message-ID: <>
    | > > | MIME-Version: 1.0
    | > > | Content-Type: text/plain;
    | > > | charset="Utf-8"
    | > > | Content-Transfer-Encoding: 7bit
    | > > | X-Newsreader: Microsoft CDO for Windows 2000
    | > > | Content-Class: urn:content-classes:message
    | > > | Importance: normal
    | > > | Priority: normal
    | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > > | Newsgroups: microsoft.public.windows.server.migration
    | > > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | > > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > > | Xref: cpmsftngxa10.phx.gbl
    microsoft.public.windows.server.migration:15075
    | > > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > > |
    | > > | Hi,
    | > > | We are in the process of Migrating Windows NT 4.0 domain to Windows
    2003
    | > > | domain. We have already migrated few users, but can not go ahead
    for some
    | > > | issues. Is it advisable to migrate the File Servers, Application
    Servers
    | > > etc.
    | > > | first before the rest of the users are migrated? The Microsoft
    | > > recommended
    | > > | steps do not suggest this.
    | > > | Please advise
    | > > | Thanks
    | > > |
    | > > | Rgds,
    | > > | Garry
    | > > |
    | > >
    | > >
    |
     
    Carsyn Gu [MSFT], Nov 10, 2004
    #5
  6. Garry

    Garry Guest

    Hi Carsyn,

    Thanks for your reply.
    But I am more confused now.
    I tested the following in my Test Lab
    In one of the File servers of Old Domain, I created a share and gave
    permission to few users which were still not migrated
    Then, I migrated the server to new domain and the users were still not
    migrated
    The user was still able to access those shares when logged into old domain
    The security settings on that folder showed as OldDomain/UserName
    Now, I migrated the user to new domain.
    The user was still able to access the share
    Moreover, the security settings on that share were automatically transalted
    and now showed Username instead of OldDomain/UserName

    Pls clarify as to if I am wrong somewhere.
    Which permissions will be lost if I follow this method for migration

    Thanks again.

    Rgds,
    Garry


     
    Garry, Nov 10, 2004
    #6
  7. Hi Garry,

    Thanks for your message.

    The scenario is right. After we migrated the server but didn¡¯t migrate the
    user accounts, the new domain didn't contain the accounts that are in the
    permission list. We only can use the user account in the old domain to be
    logged on if we want to access the resource. After we migrate the user
    accounts, we are able to access the resource with the user logon in the new
    domain.

    The benefit to migrate user accounts first is that we can have two copies
    of user accounts, which are in the old domain and in the new domain. The
    user account could logon to the old domain or logon to the new domain to
    access the resource at the same time.

    The permissions may lose if we got problem on the source domain controllers
    or the member server crash during the server migration. Therefore, the
    recommended scenario is:

    User Accounts, then Computer Accounts/Service Account

    Hope the above information clarify the issue clearly. Please feel free to
    let me know if you have any concern on it.

    Sincerely,
    Carsyn Gu
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via
    your newsreader so that others may learn and benefit
    from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Windows 2003 Migration Steps
    | thread-index: AcTHIvXjDRFZwJd+S/2YPUGhCyS9Dw==
    | X-WBNR-Posting-Host: 194.131.151.233
    | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | References: <>
    <>
    <>
    <>
    <cf#>
    | Subject: RE: Windows 2003 Migration Steps
    | Date: Wed, 10 Nov 2004 04:44:04 -0800
    | Lines: 213
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 7bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: cpmsftngxa10.phx.gbl microsoft.public.windows.server.migration:15169
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hi Carsyn,
    |
    | Thanks for your reply.
    | But I am more confused now.
    | I tested the following in my Test Lab
    | In one of the File servers of Old Domain, I created a share and gave
    | permission to few users which were still not migrated
    | Then, I migrated the server to new domain and the users were still not
    | migrated
    | The user was still able to access those shares when logged into old domain
    | The security settings on that folder showed as OldDomain/UserName
    | Now, I migrated the user to new domain.
    | The user was still able to access the share
    | Moreover, the security settings on that share were automatically
    transalted
    | and now showed Username instead of OldDomain/UserName
    |
    | Pls clarify as to if I am wrong somewhere.
    | Which permissions will be lost if I follow this method for migration
    |
    | Thanks again.
    |
    | Rgds,
    | Garry
    |
    |
    | "Carsyn Gu [MSFT]" wrote:
    |
    | > Hi Garry,
    | >
    | > Thanks for your reply.
    | >
    | > All the permission on resource (files, privileges, objects) are related
    to
    | > user accounts. When ADMT is migrating these permission settings, it
    will
    | > try to check if these user accounts can be resolved. If we didn't
    migrate
    | > the user account, the accounts in the permission list cannot be
    resolved
    | > and caused the permission migration failure.
    | >
    | > Hope the information helps.
    | >
    | > Sincerely,
    | > Carsyn Gu
    | > Microsoft Online Partner Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | > When responding to posts, please "Reply to Group" via
    | > your newsreader so that others may learn and benefit
    | > from your issue.
    | > =====================================================
    | >
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: Windows 2003 Migration Steps
    | > | thread-index: AcTGabejbqSUh5HxTUeGPYniSMS4xg==
    | > | X-WBNR-Posting-Host: 194.131.151.233
    | > | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | > | References: <>
    | > <>
    | > <>
    | > | Subject: RE: Windows 2003 Migration Steps
    | > | Date: Tue, 9 Nov 2004 06:38:02 -0800
    | > | Lines: 111
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.migration
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: cpmsftngxa10.phx.gbl
    microsoft.public.windows.server.migration:15126
    | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > |
    | > | Hi,
    | > | One more query. Please elaborate as to what do you mean by those
    | > permissions
    | > | and settings will not take effect on those later migrated users.
    | > | Which settings do you mean here?
    | > | Thanks once again.
    | > |
    | > | Rgds,
    | > | Garry
    | > |
    | > | "Garry" wrote:
    | > |
    | > | > Hi,
    | > | >
    | > | > Thanks for your kind help.
    | > | > We stopped the user migration just due to some application issues
    which
    | > do
    | > | > not wok on SID, but works on DomainName/UserName
    | > | > Otherwise, the user migration was perfectly fine with no issues
    | > | > So, we were thinking of migrating the Servers in the mean time.
    | > | > So, what will be the effects of following this method and the
    | > implications
    | > | > of that, as Microsoft does not documents anywheer about migrating
    the
    | > servers
    | > | > before the users.
    | > | > Please advise
    | > | > Thanks.
    | > | >
    | > | > Rgds,
    | > | > Garry
    | > | >
    | > | > "Carsyn Gu [MSFT]" wrote:
    | > | >
    | > | > > Hello Garry,
    | > | > >
    | > | > > Thank you for your post.
    | > | > >
    | > | > > Question 1:
    | > | > > -------------------
    | > | > >
    | > | > > We are in the process of Migrating Windows NT 4.0 domain to
    Windows
    | > 2003
    | > | > > domain. We have already migrated few users, but can not go ahead
    for
    | > some
    | > | > > issues. Is it advisable to migrate the File Servers, Application
    | > Servers
    | > | > > etc.
    | > | > > first before the rest of the users are migrated?
    | > | > >
    | > | > > [Answer]:
    | > | > >
    | > | > > Generally, we don't recommend you to migrate the File Servers,
    | > Application
    | > | > > Servers before the users are completely migrated. Only if those
    users
    | > will
    | > | > > be re-create in the new system. Those permissions and other
    settings
    | > will
    | > | > > not take effect on those later migrated users.
    | > | > >
    | > | > > About those users cannot be migrated, please kindly let me know
    what
    | > | > > happened during the migration. Did you receive any error message
    of
    | > the
    | > | > > issue? We need to collect more related information before going
    | > further.
    | > | > >
    | > | > > I hope this helps. If you have any questions or concerns, please
    do
    | > not
    | > | > > hesitate to let me know. I am happy to be of further assistance.
    | > Thank you
    | > | > > for your time and cooperation!
    | > | > >
    | > | > > Sincerely,
    | > | > > Carsyn Gu
    | > | > > Microsoft Online Partner Support
    | > | > >
    | > | > > Get Secure! - www.microsoft.com/security
    | > | > >
    | > | > > =====================================================
    | > | > > When responding to posts, please "Reply to Group" via
    | > | > > your newsreader so that others may learn and benefit
    | > | > > from your issue.
    | > | > > =====================================================
    | > | > >
    | > | > > This posting is provided "AS IS" with no warranties, and confers
    no
    | > rights.
    | > | > >
    | > | > > --------------------
    | > | > > | Thread-Topic: Windows 2003 Migration Steps
    | > | > > | thread-index: AcTFdUC5WOHqhz92T+S0792GoDNwEg==
    | > | > > | X-WBNR-Posting-Host: 194.131.151.233
    | > | > > | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | > | > > | Subject: Windows 2003 Migration Steps
    | > | > > | Date: Mon, 8 Nov 2004 01:28:06 -0800
    | > | > > | Lines: 11
    | > | > > | Message-ID: <>
    | > | > > | MIME-Version: 1.0
    | > | > > | Content-Type: text/plain;
    | > | > > | charset="Utf-8"
    | > | > > | Content-Transfer-Encoding: 7bit
    | > | > > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | > > | Content-Class: urn:content-classes:message
    | > | > > | Importance: normal
    | > | > > | Priority: normal
    | > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | > > | Newsgroups: microsoft.public.windows.server.migration
    | > | > > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | > | > > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | > > | Xref: cpmsftngxa10.phx.gbl
    | > microsoft.public.windows.server.migration:15075
    | > | > > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > | > > |
    | > | > > | Hi,
    | > | > > | We are in the process of Migrating Windows NT 4.0 domain to
    Windows
    | > 2003
    | > | > > | domain. We have already migrated few users, but can not go
    ahead
    | > for some
    | > | > > | issues. Is it advisable to migrate the File Servers,
    Application
    | > Servers
    | > | > > etc.
    | > | > > | first before the rest of the users are migrated? The Microsoft
    | > | > > recommended
    | > | > > | steps do not suggest this.
    | > | > > | Please advise
    | > | > > | Thanks
    | > | > > |
    | > | > > | Rgds,
    | > | > > | Garry
    | > | > > |
    | > | > >
    | > | > >
    | > |
    | >
    | >
    |
     
    Carsyn Gu [MSFT], Nov 11, 2004
    #7
  8. Garry

    Garry Guest

    Hi Carsyn,

    Thaks a lot for your time and co-operation
    So, what I understand here is that I may follow the other way round of
    migrating the Servers first with the only risk of loosing permissions, if the
    Server crashes during migration
    Otherwise, there are no implications of that method.
    Thanks once again for all your kind help

    Rgds,
    Garry


     
    Garry, Nov 11, 2004
    #8
  9. Hi Garry,

    Appreciate your update and response. I am glad to hear that the problem has
    been fixed. If you have any other questions or concerns, please do not
    hesitate to contact us. It is always our pleasure to be of assistance.

    Have a nice day!


    Sincerely,
    Carsyn Gu
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    =====================================================
    When responding to posts, please "Reply to Group" via
    your newsreader so that others may learn and benefit
    from your issue.
    =====================================================

    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    | Thread-Topic: Windows 2003 Migration Steps
    | thread-index: AcTH0x0yAZ3dppWxSt+teQcrfqMJvA==
    | X-WBNR-Posting-Host: 194.200.176.226
    | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | References: <>
    <>
    <>
    <>
    <cf#>
    <>
    <>
    | Subject: RE: Windows 2003 Migration Steps
    | Date: Thu, 11 Nov 2004 01:45:01 -0800
    | Lines: 319
    | Message-ID: <>
    | MIME-Version: 1.0
    | Content-Type: text/plain;
    | charset="Utf-8"
    | Content-Transfer-Encoding: 8bit
    | X-Newsreader: Microsoft CDO for Windows 2000
    | Content-Class: urn:content-classes:message
    | Importance: normal
    | Priority: normal
    | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | Newsgroups: microsoft.public.windows.server.migration
    | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | Xref: cpmsftngxa10.phx.gbl microsoft.public.windows.server.migration:15203
    | X-Tomcat-NG: microsoft.public.windows.server.migration
    |
    | Hi Carsyn,
    |
    | Thaks a lot for your time and co-operation
    | So, what I understand here is that I may follow the other way round of
    | migrating the Servers first with the only risk of loosing permissions, if
    the
    | Server crashes during migration
    | Otherwise, there are no implications of that method.
    | Thanks once again for all your kind help
    |
    | Rgds,
    | Garry
    |
    |
    | "Carsyn Gu [MSFT]" wrote:
    |
    | > Hi Garry,
    | >
    | > Thanks for your message.
    | >
    | > The scenario is right. After we migrated the server but didn¡¯t
    migrate the
    | > user accounts, the new domain didn't contain the accounts that are in
    the
    | > permission list. We only can use the user account in the old domain to
    be
    | > logged on if we want to access the resource. After we migrate the user
    | > accounts, we are able to access the resource with the user logon in the
    new
    | > domain.
    | >
    | > The benefit to migrate user accounts first is that we can have two
    copies
    | > of user accounts, which are in the old domain and in the new domain.
    The
    | > user account could logon to the old domain or logon to the new domain
    to
    | > access the resource at the same time.
    | >
    | > The permissions may lose if we got problem on the source domain
    controllers
    | > or the member server crash during the server migration. Therefore, the
    | > recommended scenario is:
    | >
    | > User Accounts, then Computer Accounts/Service Account
    | >
    | > Hope the above information clarify the issue clearly. Please feel free
    to
    | > let me know if you have any concern on it.
    | >
    | > Sincerely,
    | > Carsyn Gu
    | > Microsoft Online Partner Support
    | >
    | > Get Secure! - www.microsoft.com/security
    | >
    | > =====================================================
    | > When responding to posts, please "Reply to Group" via
    | > your newsreader so that others may learn and benefit
    | > from your issue.
    | > =====================================================
    | >
    | > This posting is provided "AS IS" with no warranties, and confers no
    rights.
    | >
    | > --------------------
    | > | Thread-Topic: Windows 2003 Migration Steps
    | > | thread-index: AcTHIvXjDRFZwJd+S/2YPUGhCyS9Dw==
    | > | X-WBNR-Posting-Host: 194.131.151.233
    | > | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | > | References: <>
    | > <>
    | > <>
    | > <>
    | > <cf#>
    | > | Subject: RE: Windows 2003 Migration Steps
    | > | Date: Wed, 10 Nov 2004 04:44:04 -0800
    | > | Lines: 213
    | > | Message-ID: <>
    | > | MIME-Version: 1.0
    | > | Content-Type: text/plain;
    | > | charset="Utf-8"
    | > | Content-Transfer-Encoding: 7bit
    | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | Content-Class: urn:content-classes:message
    | > | Importance: normal
    | > | Priority: normal
    | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | Newsgroups: microsoft.public.windows.server.migration
    | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | Xref: cpmsftngxa10.phx.gbl
    microsoft.public.windows.server.migration:15169
    | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > |
    | > | Hi Carsyn,
    | > |
    | > | Thanks for your reply.
    | > | But I am more confused now.
    | > | I tested the following in my Test Lab
    | > | In one of the File servers of Old Domain, I created a share and gave
    | > | permission to few users which were still not migrated
    | > | Then, I migrated the server to new domain and the users were still
    not
    | > | migrated
    | > | The user was still able to access those shares when logged into old
    domain
    | > | The security settings on that folder showed as OldDomain/UserName
    | > | Now, I migrated the user to new domain.
    | > | The user was still able to access the share
    | > | Moreover, the security settings on that share were automatically
    | > transalted
    | > | and now showed Username instead of OldDomain/UserName
    | > |
    | > | Pls clarify as to if I am wrong somewhere.
    | > | Which permissions will be lost if I follow this method for migration
    | > |
    | > | Thanks again.
    | > |
    | > | Rgds,
    | > | Garry
    | > |
    | > |
    | > | "Carsyn Gu [MSFT]" wrote:
    | > |
    | > | > Hi Garry,
    | > | >
    | > | > Thanks for your reply.
    | > | >
    | > | > All the permission on resource (files, privileges, objects) are
    related
    | > to
    | > | > user accounts. When ADMT is migrating these permission settings, it
    | > will
    | > | > try to check if these user accounts can be resolved. If we didn't
    | > migrate
    | > | > the user account, the accounts in the permission list cannot be
    | > resolved
    | > | > and caused the permission migration failure.
    | > | >
    | > | > Hope the information helps.
    | > | >
    | > | > Sincerely,
    | > | > Carsyn Gu
    | > | > Microsoft Online Partner Support
    | > | >
    | > | > Get Secure! - www.microsoft.com/security
    | > | >
    | > | > =====================================================
    | > | > When responding to posts, please "Reply to Group" via
    | > | > your newsreader so that others may learn and benefit
    | > | > from your issue.
    | > | > =====================================================
    | > | >
    | > | > This posting is provided "AS IS" with no warranties, and confers no
    | > rights.
    | > | >
    | > | > --------------------
    | > | > | Thread-Topic: Windows 2003 Migration Steps
    | > | > | thread-index: AcTGabejbqSUh5HxTUeGPYniSMS4xg==
    | > | > | X-WBNR-Posting-Host: 194.131.151.233
    | > | > | From: "=?Utf-8?B?R2Fycnk=?=" <>
    | > | > | References: <>
    | > | > <>
    | > | > <>
    | > | > | Subject: RE: Windows 2003 Migration Steps
    | > | > | Date: Tue, 9 Nov 2004 06:38:02 -0800
    | > | > | Lines: 111
    | > | > | Message-ID: <>
    | > | > | MIME-Version: 1.0
    | > | > | Content-Type: text/plain;
    | > | > | charset="Utf-8"
    | > | > | Content-Transfer-Encoding: 7bit
    | > | > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | > | Content-Class: urn:content-classes:message
    | > | > | Importance: normal
    | > | > | Priority: normal
    | > | > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | > | Newsgroups: microsoft.public.windows.server.migration
    | > | > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | > | > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | > | Xref: cpmsftngxa10.phx.gbl
    | > microsoft.public.windows.server.migration:15126
    | > | > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > | > |
    | > | > | Hi,
    | > | > | One more query. Please elaborate as to what do you mean by those
    | > | > permissions
    | > | > | and settings will not take effect on those later migrated users.
    | > | > | Which settings do you mean here?
    | > | > | Thanks once again.
    | > | > |
    | > | > | Rgds,
    | > | > | Garry
    | > | > |
    | > | > | "Garry" wrote:
    | > | > |
    | > | > | > Hi,
    | > | > | >
    | > | > | > Thanks for your kind help.
    | > | > | > We stopped the user migration just due to some application
    issues
    | > which
    | > | > do
    | > | > | > not wok on SID, but works on DomainName/UserName
    | > | > | > Otherwise, the user migration was perfectly fine with no issues
    | > | > | > So, we were thinking of migrating the Servers in the mean time.
    | > | > | > So, what will be the effects of following this method and the
    | > | > implications
    | > | > | > of that, as Microsoft does not documents anywheer about
    migrating
    | > the
    | > | > servers
    | > | > | > before the users.
    | > | > | > Please advise
    | > | > | > Thanks.
    | > | > | >
    | > | > | > Rgds,
    | > | > | > Garry
    | > | > | >
    | > | > | > "Carsyn Gu [MSFT]" wrote:
    | > | > | >
    | > | > | > > Hello Garry,
    | > | > | > >
    | > | > | > > Thank you for your post.
    | > | > | > >
    | > | > | > > Question 1:
    | > | > | > > -------------------
    | > | > | > >
    | > | > | > > We are in the process of Migrating Windows NT 4.0 domain to
    | > Windows
    | > | > 2003
    | > | > | > > domain. We have already migrated few users, but can not go
    ahead
    | > for
    | > | > some
    | > | > | > > issues. Is it advisable to migrate the File Servers,
    Application
    | > | > Servers
    | > | > | > > etc.
    | > | > | > > first before the rest of the users are migrated?
    | > | > | > >
    | > | > | > > [Answer]:
    | > | > | > >
    | > | > | > > Generally, we don't recommend you to migrate the File
    Servers,
    | > | > Application
    | > | > | > > Servers before the users are completely migrated. Only if
    those
    | > users
    | > | > will
    | > | > | > > be re-create in the new system. Those permissions and other
    | > settings
    | > | > will
    | > | > | > > not take effect on those later migrated users.
    | > | > | > >
    | > | > | > > About those users cannot be migrated, please kindly let me
    know
    | > what
    | > | > | > > happened during the migration. Did you receive any error
    message
    | > of
    | > | > the
    | > | > | > > issue? We need to collect more related information before
    going
    | > | > further.
    | > | > | > >
    | > | > | > > I hope this helps. If you have any questions or concerns,
    please
    | > do
    | > | > not
    | > | > | > > hesitate to let me know. I am happy to be of further
    assistance.
    | > | > Thank you
    | > | > | > > for your time and cooperation!
    | > | > | > >
    | > | > | > > Sincerely,
    | > | > | > > Carsyn Gu
    | > | > | > > Microsoft Online Partner Support
    | > | > | > >
    | > | > | > > Get Secure! - www.microsoft.com/security
    | > | > | > >
    | > | > | > > =====================================================
    | > | > | > > When responding to posts, please "Reply to Group" via
    | > | > | > > your newsreader so that others may learn and benefit
    | > | > | > > from your issue.
    | > | > | > > =====================================================
    | > | > | > >
    | > | > | > > This posting is provided "AS IS" with no warranties, and
    confers
    | > no
    | > | > rights.
    | > | > | > >
    | > | > | > > --------------------
    | > | > | > > | Thread-Topic: Windows 2003 Migration Steps
    | > | > | > > | thread-index: AcTFdUC5WOHqhz92T+S0792GoDNwEg==
    | > | > | > > | X-WBNR-Posting-Host: 194.131.151.233
    | > | > | > > | From: "=?Utf-8?B?R2Fycnk=?="
    <>
    | > | > | > > | Subject: Windows 2003 Migration Steps
    | > | > | > > | Date: Mon, 8 Nov 2004 01:28:06 -0800
    | > | > | > > | Lines: 11
    | > | > | > > | Message-ID:
    <>
    | > | > | > > | MIME-Version: 1.0
    | > | > | > > | Content-Type: text/plain;
    | > | > | > > | charset="Utf-8"
    | > | > | > > | Content-Transfer-Encoding: 7bit
    | > | > | > > | X-Newsreader: Microsoft CDO for Windows 2000
    | > | > | > > | Content-Class: urn:content-classes:message
    | > | > | > > | Importance: normal
    | > | > | > > | Priority: normal
    | > | > | > > | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
    | > | > | > > | Newsgroups: microsoft.public.windows.server.migration
    | > | > | > > | NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
    | > | > | > > | Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
    | > | > | > > | Xref: cpmsftngxa10.phx.gbl
    | > | > microsoft.public.windows.server.migration:15075
    | > | > | > > | X-Tomcat-NG: microsoft.public.windows.server.migration
    | > | > | > > |
    | > | > | > > | Hi,
    | > | > | > > | We are in the process of Migrating Windows NT 4.0 domain to
    | > Windows
    | > | > 2003
    | > | > | > > | domain. We have already migrated few users, but can not go
    | > ahead
    | > | > for some
    | > | > | > > | issues. Is it advisable to migrate the File Servers,
    | > Application
    | > | > Servers
    | > | > | > > etc.
    | > | > | > > | first before the rest of the users are migrated? The
    Microsoft
    | > | > | > > recommended
    | > | > | > > | steps do not suggest this.
    | > | > | > > | Please advise
    | > | > | > > | Thanks
    | > | > | > > |
    | > | > | > > | Rgds,
    | > | > | > > | Garry
    | > | > | > > |
    | > | > | > >
    | > | > | > >
    | > | > |
    | > | >
    | > | >
    | > |
    | >
    | >
    |
     
    Carsyn Gu [MSFT], Nov 12, 2004
    #9
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.