It works well, we have done it. We took a DC from our root domain, plus DCs
from two of the (four) child domains. If you have multiple domains, I
would suggest that make sure your DCs are GC servers before you take them
offline. This caused us a few difficulties when we tried to make the server
a GC after-the-fact, as it complained that it did not have up-to-date about
the other two domains that we did not take offline.
When we get time, I would like to do it again, using virtual servers. I
think that would provide a bit more flexibility...
Tyson.
--------------------------------------------------------
Tyson Leslie
Senior Network Analyst
Colt Engineering Corporation
(403) 258-8153
[EMAIL PROTECTED]
--------------------------------------------------------
-----Original Message-----
From: Rutherford, Robert [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 10, 2004 9:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [ActiveDir] Non DR migration of AD
Bring up a new DC..
Take it off the production domain and into the lab... Seize the roles?
You will have to do some clean up but it's the easiest way if it's not going
to be linked to your production domain.
Rob
-----Original Message-----
From: Glenn Corbett [mailto:[EMAIL PROTECTED]
Sent: 10 June 2004 16:00
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Non DR migration of AD
All,
We are in the process of constructing a Lab to mimic the production AD
system as closely as possible. Doing a full DR into this environment is
certainly an option, however we have been looking into simply migrating
the AD "structure" and using this as a test bed to cleanup AD (OU's,
objects, permissions, policies etc).
Is anyone aware of tools or procedures to get the major AD configuration
components into a lab using an approach that can be scripted / automated
? (we may want to do this every few months or so). For example, we have
used LDIFDE to extract the OU structure, users and groups and
re-imported these into the test lab. By and large this has worked very
well (took some tweaking of the LDIFDE commands to resolve some
constraint violations etc), however items such as OU security and
policies is causing a bit more of a headache.
Any thoughts ?
TIA
Glenn
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive:
http://www.mail-archive.com/activedir%40mail.activedir.org/
This e-mail and the information it contains are confidential and may be
privileged. If you have received this e-mail in error please notify the
sender immediately and delete the material from any computer. Unless you are
the intended recipient, you should not copy this e-mail for any purpose, or
disclose its contents to any other person.
The MCPS-PRS Alliance is not responsible for the completeness or accuracy of
this communication as it has been transmitted over a public network. Whilst
the MCPS-PRS Alliance monitors all communications for potential viruses, we
accept no responsibility for any loss or damage caused by this e-mail and
the information it contains.
It is the recipient's responsibility to scan this e-mail and any attachments
for viruses. Any
e-mails sent to and from the MCPS-PRS Alliance servers may be monitored for
quality control and other purposes.
The MCPS-PRS Alliance Limited is a limited company registered in England
under company number 03444246 whose registered office is at c/o 29-33
Berners Street, London, W1T 3AB.
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info : http://www.activedir.org/mail_list.htm
List FAQ : http://www.activedir.org/list_faq.htm
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
