RE: [ActiveDir] Merging two domains

[Rick Kingslan]

Title: RE: [ActiveDir] Merging two domains

The trust is only one issue.  It doesn’t appear that he’s being allowed enough access to set anything up. I’m certain (though I haven’t worked with Migration Manager) that there must be some type of LDAP Bind or agreement setup between ADAM and the source / targets. I’m not sure that he’s going to have this degree of latitude, either.  However, if he is – go for it. Not cheap, but it might be worth the money in man-hours for recreation of functional user and computer accounts, not to mention the Exchange. Rick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, August 08, 2005 7:00 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Merging two domains   Migration Manager for Active Directory from Quest will allow you to migrate objects from the external domain without setting up a trust. I believe you do need to be running 2003 in the source domain as it stores information in ADAM during the migration. Check out the URL below. http://wm.quest.com/products/migrationmanagerad/ "Almeida Pinto, Jorge de" [EMAIL PROTECTED] com> cc Sent by: [EMAIL PROTECTED] Subject ail.activedir.org RE: [ActiveDir] Merging two domains 08/06/2005 02:39 PM Please respond to [EMAIL PROTECTED] tivedir.org yeah... this is also the first thing I thought.  I also thought of something else. Will those users ever need to access their old resources? (like mail, files ,etc) If no access is allowed how are you going to do that? Exmerge all mailboxes into PSTs en burn files on DVD or something like that?   Cheers #JORGE#   From: [EMAIL PROTECTED] on behalf of Rick Kingslan Sent: Sat 8/6/2005 7:11 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Merging two domains Interesting issue.  SIDHistory is not much of an issue, obviously. Apparently, the users won't have access to the old forest, so it's of little value. I would suspect, as a 'from the hip' approach - given you limits you really only have a .ldf or a .csv dump of the accounts that are to become a part of your domain. However, if you aren't going to be allowed any access to the old forest, then there is no reason to think that the users would be any more than newly created principlas, along with the computers that you might acquire. Dump the information, but I wouldn't get to terribly concerned about what is coming with them.  Other than name, logon name, samAccountName, there isn't much that you can use. Rick   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rimmerman, Russ Sent: Saturday, August 06, 2005 11:17 AM To: ActiveDir@mail.activedir.org Subject: [ActiveDir] Merging two domains We have an external domain that we will not be allow to set up a two way trust with, not be allowed to migrate users from, etc.  Basically it's a partial domain import from one domain to our current Win2k3 domain. Getting access to the external domain is out of the question since the external domain is not currently ours.  Part of it will become ours.   Are there any alternative ways to import or migrate users from an external domain?  I understand SID history and all the nice things that go along with it (profile migrations, etc) will not work.  What about doing some type of an LDIFDE export and import?  Will that at least get us the account creations?  What other alternatives are there to have the least end-user impact when changing their domain?  Any documents out there outlining this? Thanks to all. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ This e-mail is confidential, may contain proprietary information of the Cooper Cameron Corporation and its operating Divisions and may be confidential or privileged. This e-mail should be read, copied, disseminated and/or used only by the addressee. If you have received this message in error please delete it, together with any attachments, from your system. ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ List info   : http://www.activedir.org/List.aspx List FAQ    : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info   : http://www.activedir.org/List.aspx List FAQ    : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. (See attached file: winmail.dat)