Need Help...Migrate 2000 Srvr WG to 2003 AD Domain w/o disturbing current ops

skeptikal · 10-30-2009, 01:31 PM

I just want to say thank you ahead of time for even looking at this question. This is my first post and I did spend some time attempting to search for my answer - which I know already exists somewhere in this forum - with no luck.

So, I am a lone computer/network technician(read: in over his head

) for a law enforcement agency. I have been tasked with upgrading a hundred plus user workgroup into a domain. The file server for the workgroup is running 2000 server with local user/groups and folder permissions as to be expected. The 2 new servers are 2003 Servers. The first 2003 server has been setup as a DC and I have succesfully joined the second 2003 server and a test workstation to the domain.

Now, I realize that 104 users is probably not a lot to migrate one by one. However, I do not have all of the users' passwords or permissions available to me without walking around collecting that info. So, with that said, my goal is to migrate all of that information from a non-domain-controlling 2000 server to the DC'ing 2003 server.

My initial plan was to promote the 2000 server to a DC and use Active Directory Migration Tool to migrate users/groups/permissions. My worry with that is that it will interrupt the current workgroup situation. I could do it after hours but then I am afraid that when I demote the 2000 server back to a WG I will lose all the users and groups.

Please let me know if you think I am way off track in what I am doing here. If there is a better/faster/cleaner way to do this don't hesitate to let me know what it is. Again, thanks in advance for any help!

skeptikal · 11-01-2009, 11:39 AM

Nobody done anything similar?

skeptikal · 11-03-2009, 03:19 PM

bump?

skeptikal · 11-16-2009, 08:42 AM

anybody know how to do this one by one even? Maybe just local users win2k server to local users win2k3 server? Is this possible one-by one while keeping passwords?

**djaburg** · 11-16-2009, 03:35 PM

The biggest issue you'll face will be the changing desktop. When a computer is joined to a domain a new user is created and thus a new desktop. For some people it's not an issue, but I know from experience it can be very much an issue for someone that's, shall we say, less flexible. I'd start by creating the users in AD along with their passwords. Then you'll need to join the computers to the domain. Once the users have logged in the first time, you can then migrate the data from their old user to the new one. Most things should remain available during the process, but it does take some time. Once the initial migration is over, people will adjust.

**2xgrump** · 11-17-2009, 12:21 PM

Quote:

Originally Posted by skeptikal

I just want to say thank you ahead of time for even looking at this question. This is my first post and I did spend some time attempting to search for my answer - which I know already exists somewhere in this forum - with no luck.

So, I am a lone computer/network technician(read: in over his head

) for a law enforcement agency. I have been tasked with upgrading a hundred plus user workgroup into a domain. The file server for the workgroup is running 2000 server with local user/groups and folder permissions as to be expected. The 2 new servers are 2003 Servers. The first 2003 server has been setup as a DC and I have succesfully joined the second 2003 server and a test workstation to the domain.

Now, I realize that 104 users is probably not a lot to migrate one by one. However, I do not have all of the users' passwords or permissions available to me without walking around collecting that info. So, with that said, my goal is to migrate all of that information from a non-domain-controlling 2000 server to the DC'ing 2003 server.

My initial plan was to promote the 2000 server to a DC and use Active Directory Migration Tool to migrate users/groups/permissions. My worry with that is that it will interrupt the current workgroup situation. I could do it after hours but then I am afraid that when I demote the 2000 server back to a WG I will lose all the users and groups.

Please let me know if you think I am way off track in what I am doing here. If there is a better/faster/cleaner way to do this don't hesitate to let me know what it is. Again, thanks in advance for any help!

Hello skeptikal...

You will utilize a lot of hours doing this project, plan this on a weekend or I don't know your business hours, to avoid downtime and w/o disturbing the users. Plan wisely. You should keep a file of all the Users and Pass, store it in an ext device like USB.

10-30-2009, 01:31 PM	#1 (permalink)
skeptikal Registered User Join Date: Oct 2009 Posts: 11 OS: XP Pro SP3	Migrate users/groups - 2000 Srvr WG to 2003 AD Domain w/o disturbing current ops I just want to say thank you ahead of time for even looking at this question. This is my first post and I did spend some time attempting to search for my answer - which I know already exists somewhere in this forum - with no luck. So, I am a lone computer/network technician(read: in over his head) for a law enforcement agency. I have been tasked with upgrading a hundred plus user workgroup into a domain. The file server for the workgroup is running 2000 server with local user/groups and folder permissions as to be expected. The 2 new servers are 2003 Servers. The first 2003 server has been setup as a DC and I have succesfully joined the second 2003 server and a test workstation to the domain. Now, I realize that 104 users is probably not a lot to migrate one by one. However, I do not have all of the users' passwords or permissions available to me without walking around collecting that info. So, with that said, my goal is to migrate all of that information from a non-domain-controlling 2000 server to the DC'ing 2003 server. My initial plan was to promote the 2000 server to a DC and use Active Directory Migration Tool to migrate users/groups/permissions. My worry with that is that it will interrupt the current workgroup situation. I could do it after hours but then I am afraid that when I demote the 2000 server back to a WG I will lose all the users and groups. Please let me know if you think I am way off track in what I am doing here. If there is a better/faster/cleaner way to do this don't hesitate to let me know what it is. Again, thanks in advance for any help! Last edited by skeptikal; 10-30-2009 at 01:51 PM.

11-01-2009, 11:39 AM	#2 (permalink)
skeptikal Registered User Join Date: Oct 2009 Posts: 11 OS: XP Pro SP3	Re: Need Help...Migrate 2000 Srvr WG to 2003 AD Domain w/o disturbing current ops Nobody done anything similar?

11-03-2009, 03:19 PM	#3 (permalink)
skeptikal Registered User Join Date: Oct 2009 Posts: 11 OS: XP Pro SP3	Re: Need Help...Migrate 2000 Srvr WG to 2003 AD Domain w/o disturbing current ops bump?

11-16-2009, 08:42 AM	#4 (permalink)
skeptikal Registered User Join Date: Oct 2009 Posts: 11 OS: XP Pro SP3	Re: Need Help...Migrate 2000 Srvr WG to 2003 AD Domain w/o disturbing current ops anybody know how to do this one by one even? Maybe just local users win2k server to local users win2k3 server? Is this possible one-by one while keeping passwords?

11-16-2009, 03:35 PM	#5 (permalink)
djaburg TSF Enthusiast Join Date: May 2008 Posts: 1,313 OS: XP SP3/Vista/7 Server 2K/2K3/2K8	Re: Need Help...Migrate 2000 Srvr WG to 2003 AD Domain w/o disturbing current ops The biggest issue you'll face will be the changing desktop. When a computer is joined to a domain a new user is created and thus a new desktop. For some people it's not an issue, but I know from experience it can be very much an issue for someone that's, shall we say, less flexible. I'd start by creating the users in AD along with their passwords. Then you'll need to join the computers to the domain. Once the users have logged in the first time, you can then migrate the data from their old user to the new one. Most things should remain available during the process, but it does take some time. Once the initial migration is over, people will adjust. __________________ Computers make it easier to do a lot of things, but most of the things they make it easier to do don't need to be done. The inherent vice of capitalism is the uneven division of blessings, while the inherent virtue of socialism is the equal division of misery.