Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.

Slides:



Advertisements
Similar presentations
By Rashid Khan Lesson 5-Directory Assistance: Administration Using Active Directory Users and Computers.
Advertisements

1 Module 3 Setting Up User Accounts. 2  Overview Introduction to User Accounts Planning New User Accounts Creating User Accounts Deleting and Renaming.
Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.
Module 6: Configuring Windows XP Professional to Operate in a Microsoft Network.
MCSE Guide to Microsoft Exchange Server 2003 Administration Chapter 14 Upgrading to Exchange Server 2003.
Module 4: Implementing User, Group, and Computer Accounts
Making the move to Windows Server 2003 in the Enterprise Doing More with Less Peter J. Meister Product Manager Windows Server Product Management Microsoft.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.
Chapter 9 Chapter 9: Managing Groups, Folders, Files, and Object Security.
7.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
6.1 © 2004 Pearson Education, Inc. Exam Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure.
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 9: Implementing and Using Group Policy.
Administering Active Directory
Lesson 19 – ADMINISTERING WINDOWS 2000 SERVER : THE BASICS.
Window NT Workstation and Server. Windows NT refers to two products workstation server can act as both a client and server in a network environment.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
Hands-On Microsoft Windows Server 2003 Administration Chapter 3 Administering Active Directory.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
By Rashid Khan Lesson 8-Crowd Control: Controlling Access to Resources Using Groups.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
3.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 3: Introducing Active Directory.
Setting up in Outlook Express. Select “Tools” from the toolbar menu.
11 WORKING WITH COMPUTER ACCOUNTS Chapter 8. Chapter 8: WORKING WITH COMPUTER ACCOUNTS2 CHAPTER OVERVIEW  Describe the process of adding a computer to.
Ch 9 Managing Active Directory User Accounts. Objectives Create Organizational Unit Creating User Accounts in Active Directory Disabling, Enabling, and.
11 WORKING WITH COMPUTER ACCOUNTS Chapter 8. Chapter 8: WORKING WITH COMPUTER ACCOUNTS2 CHAPTER OVERVIEW Describe the process of adding a computer to.
Guide to MCSE , Enhanced 1 Activity 9-1: Creating a Group Policy Object Using the MMC Objective: To create a GPO using the Group Policy Object Editor.
1 Module 2 Installing Windows NT. 2  Overview Preparing for Installation Installing Windows NT Performing a Server-based Installation Troubleshooting.
1 Chapter Overview Creating User and Computer Objects Maintaining User Accounts Creating User Profiles.
Chapter 7 WORKING WITH GROUPS.
Chapter 7 Managing OUs and Active Directory Accounts
Guide to MCSE , Enhanced 1 Activity 10-1: Restarting Windows Server 2003 Objective: to restart Windows Server 2003 Start  Shut Down  Restart Configure.
11 WORKING WITH USER ACCOUNTS Chapter 6. Chapter 6: WORKING WITH USER ACCOUNTS2 CHAPTER OVERVIEW Understand the differences between local user and domain.
Guide to MCSE , Enhanced 1 Activity 4-1: Creating and Adding Members to Global Groups Objective: Use Active Directory Users and Computers to create.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment, Enhanced Chapter 9: Implementing and Using Group Policy.
1 Group Account Administration Introduction to Groups Planning a Group Strategy Creating Groups Understanding Default Groups Groups for Administrators.
Beams Division Local Administrators Meeting 9/17/02 Brian Drendel.
8.1 © 2004 Pearson Education, Inc. Exam Managing and Maintaining a Microsoft® Windows® Server 2003 Environment Lesson 8: Introducing Computer Accounts.
User Manager for Domains.  Manages the user accounts in a domain  It is located in the PDC  While User Manager exists in each NT machine, but it is.
Module 10: Configuring Windows XP Professional to Operate in Microsoft Networks.
70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory, Enhanced Chapter 10: Managing Users, Groups, Computers and Resources.
Module 13: Designing Active Directory Migrations in Windows Server 2008.
11 WORKING WITH USER ACCOUNTS Chapter 6. Chapter 6: WORKING WITH USER ACCOUNTS2 UNDERSTANDING USER ACCOUNTS  Local user accounts  stored in the Security.
DEP313 Active Directory Restructuring with ADMT v-2
70-270: MCSE Guide to Microsoft Windows XP Professional 1 Windows XP Professional User Accounts Designed for use as a network client for: Windows NT Windows.
Introduction to Microsoft Management Console (MMC) MMC is a common console framework for management applications. MMC provides a common environment for.
Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.
1 Chapter Overview Publishing Resources in Active Directory Service Redirecting Folders Using Group Policies Deploying Applications Using Group Policies.
Company Confidential 1 A Course on Global Catalog And Flexible Single Master Operations (Fsmo) Roles Prepared for: *Stars* New Horizons Certified Professional.
Guide to MCSE , Enhanced 1 Activity 12-1: Backing Up Files and Folders Using the Backup Utility Objective: To explore the use of Windows Server 2003.
1 Chapter Overview Preparing to Upgrade Performing a Version Upgrade from Microsoft SQL Server 7.0 Performing an Online Database Upgrade from SQL Server.
Operations Master / FSMO Roles in Active Directory : Suhail Ashfaq Butt.
Module 4: Managing Recipients. Overview Introduction to Exchange Recipients Creating, Deleting, and Modifying Users and Contacts Managing Mailboxes Managing.
Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
Guide to MCSE , Enhanced1 Activity 1-1: Determining the Windows Server 2003 Edition Installed on a Server Objective is to determine the edition of.
Module 14: Migrating Users from Exchange Server 5.5 to Exchange Server 2003.
1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.
© Wiley Inc All Rights Reserved. MCSE: Windows Server 2003 Active Directory Planning, Implementation, and Maintenance Study Guide, Second Edition.
Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.
11 UPGRADING AND MIGRATING TO WINDOWS SERVER 2003 Chapter 12.
Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.
11 GLOBAL CATALOG AND FLEXIBLE SINGLE MASTER OPERATIONS (FSMO) ROLES Chapter 4.
Hands-On Microsoft Windows Server Implementing User Profiles A local user profile is automatically created at the local computer when you log on.
11 IMPLEMENTING ACTIVE DIRECTORY Chapter 2. Chapter 2: IMPLEMENTING ACTIVE DIRECTORY2 REQUIREMENTS FOR ACTIVE DIRECTORY  Microsoft Windows Server 2003.
Assignment # 8.
Objectives Differentiate between the different editions of Windows Server 2003 Explain Windows Server 2003 network models and server roles Identify concepts.
70-290: MCSE Guide to Managing a Microsoft Windows Server 2003 Environment Chapter 4: Implementing and Managing Group and Computer Accounts.
Presentation transcript:

Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT

Restructuring Domains

How to Transition Service Accounts To transition service accounts: Identify service accounts 1 1 Modify the services on each server 3 3 Verify service accounts 4 4 Migrate the service accounts 2 2

How to Migrate Global Groups To migrate global groups, use the Group Account Migration Wizard to: Read the global group object in the source Add SID in the source to SID-History in the target Create a new global group object and SID in the target Log events in the source and target domains To verify migration of global groups: Verify global group accounts have been migrated Verify the original SID appears as the value of the SID-History attribute

How to Migrate Users Before migration: Notify users when credentials will be transitioned During migration:  Administer users in source domains  Manually synchronize any changes made in source domains After migration:  Re-migrate the global group accounts  Users can continue to log on to the source until switched To migrate user accounts in batches: Create a test account 1 1 Verify users have been migrated 3 3 Migrate user accounts in batch es 2 2 Translate any local user profiles 4 4 Verify migration of local user profiles 5 5 Migrate workstations for the users 6 6 Re-migrate global groups 7 7 Verify computer account migration 8 8

How to Migrate Trusts Trusts must be maintained if there is a delay between restructuring account and resource domains To verify that trusts have been migrated: Open Active Directory Domains and Trusts Right-click the domain target, click Properties Click the Trusts tab Select the trust from the list and click Properties In the Properties dialog box, click Validate Provide the appropriate user account and password To migrate trusts: Start ADMT, open Trust Migration Wizard Complete the wizard

How to Migrate Client Computers and Member Servers To prepare an ADMT script, create an options file and an include file To migrate client computers and member servers: Start ADMT and then open the Computer Account Migration Wizard Complete the wizard To verify migration of client computers and member servers: Review the migration log for errors Verify that the accounts exist in the target domain Migrate computers in batches of up to 100 systems Accounts in the local SAM database do not need to be migrated

How to Migrate Domain Controllers When determining the resource domain migration order : Migrate resource domains that use dedicated domain controllers first Migrate all BDCs before migrating the PDC Migrate resource domains that use dedicated domain controllers first Migrate all BDCs before migrating the PDC Shared local groups should be migrated before upgrading Membership of the local group during the migration is retained Shared local groups should be migrated before upgrading Membership of the local group during the migration is retained When migrating shared local groups: To migrate shared local groups: Open ADMT and select Group Account Migration Wizard Complete the wizard Migrate domain controllers when shared resources are on the domain controller Finally, migrate the BDCs

What Is Different About Restructuring After a Domain Upgrade? User and group accounts are moved together as a closed set Not as flexible as migrating users and group accounts between forests SID-History in a post-upgrade restructure SID-History can still be used to preserve users’ access to resources For SID-History to work properly, move an object from source domain to target domain Destructive operation Restructuring security principals within same Windows Server 2003 forest results in moved, not copied, objects Source domain objects cease to exist Closed sets User accounts and their groups must be moved at the same time ADMT does not calculate a complete closed set

How to Migrate Users and Groups Between Windows Server 2003 Domains To migrate users and groups between Windows Server 2003 domains: Open the Group Account Migration Wizard 1 1 Enter the required information 2 2 To verify the migration of users and groups: Review the migration log for errors Verify that the user accounts and global groups exist in the target domain Verify that the user with the migrated user account can access shared resources on the target domain