actually, it all depends on how you run ADMT.
Often you'd want to split the requirements between user/group migration
and computer migration.
The rules for migrating users and groups are:
1. for the PES (Password export server) to work, the account used to
migrate the users must be a member of
:56 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] admt2.0 permissioning
actually, it all depends on how you run ADMT.
Often you'd want to split the requirements between user/group migration
and computer migration.
The rules for migrating users and groups are:
1. for the PES (Password export
Kasdorp
Sent: Tuesday, August 24, 2004 7:55 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] admt2.0 permissioning
for SID-History to work, the account used to migrate must be a member
of the domain admins group on the TARGET domain
Addition: on W2003 you have the extended right Migrate-Sid
: Tuesday, August 24, 2004 8:33 PM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] admt2.0 permissioning
good point - but realize that it's somewhat of a risky business to grant
lower level admins the permissions to migrate-sid-history. Although I
agree with 2003 you at least have this option.
/Guido
