Active Directory Migration

Since I wrote the first six articles, I have received letters from some friends, but everyone seems to ask questions that are not related to the content of the article itself. As long as I know, I am in E- In Mail, I have answered all the questions. As long as my level is limited, I have to ask for more understanding. If you have the right method or better than my method, I am very welcome to write to you. I would like to express my gratitude! Here I choose two more typical questions and write two more articles. Here I will write a copy of the Active Directory, so I will start to get to the point.

Speaking of Active Directory migration, the migration tool is used, but Windows itself does not have a tool. I suggest you go to Microsoft's official website to download it, because you can go to the latest version, the version in the installation disk is too It is low. The full name of this tool is called Active Directory Migration Tool. We are hereinafter referred to as ADMT. The latest version is 3.0. This new version is better than the last version. I want to praise Microsoft. Finally, there is a Chinese version. Although the use of this tool is relatively simple, Therefore, the above English is not difficult, but there is a Chinese version of Microsoft's intentions, but the praise is over, by the way, then criticize, you said that you a migration tool, how can it hook up with SQL? I really don't know what Microsoft wants to do? Is it technically necessary? I don't feel anything. Is it business needs? Ask Bill. Anyway, I don't care, just use it.

Let me introduce the experimental environment first:

Target Domain:

Domain Name: demo.com

Domain Controller: server

Operating System: Windows Server 2003

IP:192.168.5.1

Subnet Mask: 255.255.255.0

DNS:192.168.5.1

Source domain:

Domain name: ms.com

Domain controller: win200ser (I was originally planning to use win2000ser, for a moment, less than one hit “0”, the wrong is wrong, anyway Nothing to do.)

Operating System: Windows 2000 Advanced Server

IP:192.168.5.10

Subnet Mask: 255.255.255.0

DNS: 192.168.5.10

Purpose of the experiment: To migrate a user named “Tom” on ms.com and a computer account named “Test2000” to Demo.com.

Before performing the formal operation, we have to do three preparatory work:

1. Promote the target domain, here the demo.com, to the native mode. .

Click “Start-Settings-Control Panel-Administrative Tools-Active Directory Users and Computers 

Right click on “demo.com”

Select the “upgrade domain functional level selected above>:

Please note that the current domain functional level is Windows 2000 mixed mode, then start the lifting operation:

Click on the &ldquo ; raise button & rdquo;, note that this operation is irreversible, after the completion of the upgrade, the following screen will appear:

This means that the upgrade is successful, if there are multiple domain control, please pay attention to the copy time, To determine that this modification is replicated to all domain controllers across the domain.

2. Make a two-way trust relationship between the two domains.

It should be said that this is a basic operation of the domain, but unfortunately many friends have planted a big fight in this step, they all wrote to tell me that I can not establish a trust relationship, when they show me After the screenshot below:

and after listening to their entire operation, I basically decided that they did not properly configure DNS, I think they must use the domain's DNS server to resolve the trust domain. The domain name, because the local DNS server does not have a record of the other domain, it will be unable to resolve, resulting in the trust relationship can not be recommended. Here I recommend a method to everyone, is to suggest a DNS auxiliary area to solve this problem:

First go to the demo.com domain, click & ldquo; Start - Settings - Control Panel - Administrative Tools - DNS & rdquo;:

Expand “SERVER”, navigate to “forward search area” and click on it & right; right click & rdquo;:

select “new area”:

Click “Next”: