none
Add to DC

    질문

  • Hi,

    I have 2 different domain Controllers:

    1) Contoso.com

    2)US.contoso.com

    I repeat both are 2 different domain controllers both are running with their own separate DHCP,DNS,AD. 

    What i want to do is:

    1)Add US.contoso.com to a contoso.com domain as a secondary DC.

    how can migrate AD uers,DNS,DHCP because US.contoso.com having DHCP which distributes IP to Phones and desktop machines in US

    and contoso.com distributes IPs to machine in India.

    2)How can i keep this thing as it is even after migrating to Contoso.com

    Please help out with this i am on this task and dont have much time.

    Thanks,


    Akshay Vithalkar
    (MCTS) | Windows Server 2008 R2 Server Virtualization
    (MCTS) | Windows Server 2008 R2 Network Infrastructure,Configuration
    (MCTS) | Windows Server 2008 R2 Active Directory, Configuration
    (MCITP)| Windows Server 2008 Server Administrator
    (MCSA) | WindowsServer2008;

    2013년 3월 8일 금요일 오전 10:24

답변

모든 응답

  • As per my understand there is parent child forest.  Contoso.com is the parent domain &  US.contoso.com is the child domain. If yes ;you can perform Intraforest migration with ADMT.

    All about ADMT

    ADMT Series – 1. Preparing Active Directory
    ADMT Series – 2. Preparing the ADMT Machine
    ADMT Series – 5. Machine Preparation
    ADMT Series – 6. Service Account Migration Wizard
    ADMT Series – 7. Group Account Migration Wizard
    ADMT Series – 8. User Account Migration Wizard
    ADMT Series – 9. Merging Users with a Different sAMAccountName
    ADMT Series – 10. Security Translation Wizard - Local Profiles
    ADMT Series – 11. Computer Migration Wizard

    Regards
    Biswajit Biswas
    My Blogs|TechnetWiki Ninja


    Best regards Biswajit Biswas Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. MCP 2003,MCSA 2003, MCSA:M 2003, CCNA, MCTS, Enterprise Admin

    2013년 3월 8일 금요일 오후 12:08
  • You have only one choice and that is to migrate the objects from us.contoso.com to contoso.com.  You can't move the DC to the new domain and things then start to work so after you do your migration you will then need to demote the us.contoso.com domain and I would recommended you reinstall the o/s before you make theold DC a new DC in the contoso.com domain.

    Microsoft has a free tool (As i.biswajth pointed out) called Active Directory Migration Toolkit or ADMT.  This process isn't that simple it takes time and you need to proceed slowly, I would suggest you do this in a test domain prior to moving forward.

    ADMT Download
    http://www.microsoft.com/en-us/download/details.aspx?id=8377

    ADMT Guide
    http://www.microsoft.com/en-us/download/details.aspx?id=19188

    -- 
    Paul Bergson
    MVP - Directory Services
    MCITP: Enterprise Administrator
    MCTS, MCT, MCSE, MCSA, Security+, BS CSci
    2008, Vista, 2003, 2000 (Early Achiever), NT4
    http://www.pbbergs.com    Twitter @pbbergs
    http://blogs.dirteam.com/blogs/paulbergson

    Please no e-mails, any questions should be posted in the NewsGroup. This posting is provided "AS IS" with no warranties, and confers no rights.

    2013년 3월 8일 금요일 오후 12:53
    중재자
  • With you highlightinh the "repeat" part are you actually meaning they are separate forests not root and child?

    Cheers Andy

    2013년 3월 8일 금요일 오후 1:43
  • Agree with other experts, I think you are confused or trying to confuse others. Contoso.com and US.contoso.com are 2 domains. As Biswajith said this scenario is like parent and child domain in one single forest. Let us know how many domain controllers are there in Contoso.com, I believe only 1 DC so as US.contoso.com. If I'm correct, you have to perform AD Migration using ADMT tool. Check Biswajith and Paul's comments for links.

    2013년 3월 8일 금요일 오후 2:20
  • Can't tell if that was directed at me or not VenkatSP?

    If it was then it is quite reasonable to ask the question for clarity, there was no indication I was saying that was the case.  If not then no worries.


    Cheers Andy

    2013년 3월 9일 토요일 오전 11:29
  • As i.biswajith and Paul mentioned, ADMT is an option to do this migration.

    Note here that ADMT cannot be used for domains having the same NetBIOS name so please check this part before proceeding (This is in case if they are not in the same forest. If this would be true, you need a trust relationship between the domains as there will be no one created by default).

    Sivarajan has a good article regarding the use of ADMT: http://portal.sivarajan.com/2011/05/user-account-migration-and-merging-part.html

    ADMT has the ability of migrating the SID history which will allow users to still access migrated resources where their ACLs are based on SIDs.

    Quest Migration Manager is an option too: http://portal.sivarajan.com/2011/07/user-account-migration-and-merging-part.html


    This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.


    2013년 3월 9일 토요일 오후 1:33
  • Even if it is child domain users/computer migration to root domian or different forest ADMT is your friend.

    Moving (migrating) resources from child domain to parent domain
    http://social.technet.microsoft.com/Forums/en-US/winserverDS/thread/b2415bc1-1ff6-4e51-bd5d-3a7a2e543908/


    Best Regards,

    Sandesh Dubey.

    MCSE|MCSA:Messaging|MCTS|MCITP:Enterprise Adminitrator | My Blog

    Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

    2013년 3월 11일 월요일 오전 5:25
  • Hi,

    Yes, both are two different domain controllers 

    And i chose ADMT. and i dont think so there is any other option.

    Thanks,



    Akshay Vithalkar
    (MCTS) | Windows Server 2008 R2 Server Virtualization
    (MCTS) | Windows Server 2008 R2 Network Infrastructure,Configuration
    (MCTS) | Windows Server 2008 R2 Active Directory, Configuration
    (MCITP)| Windows Server 2008 Server Administrator
    (MCSA) | WindowsServer2008;

    2013년 3월 11일 월요일 오전 9:41
  • Hi,

    But whats my concern is even after migrating with ADMT.

    Does this migration will also migrate the profiles of the user? If not is there anyway to do that?

    Because i don't even want my users to know that we have made such kind of change. 

    Thanks, 


    Akshay Vithalkar
    (MCTS) | Windows Server 2008 R2 Server Virtualization
    (MCTS) | Windows Server 2008 R2 Network Infrastructure,Configuration
    (MCTS) | Windows Server 2008 R2 Active Directory, Configuration
    (MCITP)| Windows Server 2008 Server Administrator
    (MCSA) | WindowsServer2008;

    2013년 3월 11일 월요일 오후 12:23