Hi,
i'm testing ADMT v2 and i've read almost all the documentation and papers on microsoft website and on this newsgroup's archive but.... What i wasn't able to find is a sort of "best practice" about order migration.
A lot of paper about how to migrate user accounts and nothin more. Nothin' about security translation wizard order or User options.
In the "Solution Accelerator for Domain Server Consolidation and Migration" the illustrated preffered order is Identify Service Accounts, Global Groups, User Accounts (and Service Accounts), Workstations, Security Translations, Member Servers,Exchange mailbox. (Implementation Guide)
In the Chapter 11 "Restructuring Active Directory Domains Between Forests" in the "Windows Server 2003 Deployment Kit Designing and Deploying Directory and Security Services" the preferred order is: Identify Service Accounts, Migrate Service Accounts, Global Groups, User Accounts, Workstations (with some security translations applied), Re-migrate Global Groups, Security Translations, Member Servers,
On the microsoft.public newsgroup some Microsoft's folk suggest, in general, the migration order is users, computers, groups, resources.
Now i'm really confused :-)
I did a lab but what i'm missing is the order for security translations and user local profiles. Is it better to perform security translations during the workstations migration or during a Security Translation Wizard session ? Local profiles are better migrated in Replace Mode or Add Mode (if i've no GPO sw already deployed)?
Again in both documents i miss a good example of how a SID Mapping file must be structured. The example reported are not complete for what i understood.
I already upgrade in place a NT 4.0 domain to Windows Server 2003 and we are in 2003 native (DLF and FFL).
All pre-migration stuff for ADMT are in place.
We need now to consolidate 3 either domains (2 NT 4.0 + 1 W2K AD) by ADMT 2.
The right migration order is my nightmare :-)
Thanks in advance
FrancT
