MCITP 70-640: Active Directory Migration Tool (ADMT)

ADMT is used to quickly move objects around in your forest. It is used during migrations or when you need to move users between domains during restructures or job changes. This video looks at how to install and use ADMT.
Handout itfreetraining....
Installing ADMT
Before installing ADMT, it is worth downloading the ADMT guide (see link below). The guide will show you which installs are supported. If you download the latest version of ADMT or SQL express you may have install problems and need to implement a workaround. Reading this guide will tell you which combination of software will work.
www.microsoft.c...
Although possible, it is not recommended to install ADMT on a Domain Controller. The install itself may not work correctly and a workaround many need to be implemented in order to get ADMT to work correctly.
Inter-Forest Migration
This is when objects are being moved/copied between domains in different forests. The forest can be connected by any valid trust.
Intra-Forest Migration
This is when the objects are being moved/copied between domains that are in the same forest.
Sid History
A Sid is a unique number that every object in Active Directory has. When ADMT moves an object it essentially creates a new object in the target domain with the same properties. When a user is moved or copied, the user will have a different Sid than the old user. Because the new user has a different Sid, it will not be able to access any of the resources the old Sid had. Sid history allows Sid's for the old user to be stored with the new user. This essentially allows the new user to access resources that were assigned using the old Sid's.
Demonstration
In this demonstration ADMT 3.2 will be installed on Windows Server 2008 R2 with SQL Express 2008 SP1 providing the database support. We could not get SQL Express 2012 to work in this configuration and the ADMT guide recommended SQL Express 2008 SP1 to be used. If you run different version and have installation errors, search the Microsoft web site for the error. This may give you a workaround to get that configuration to work.
Once ADMT is installed, it is matter of running the required wizard depending on what you want to migrate. When migrating groups, ADMT can be configured to put the user in the same groups that they had in the old domain. In order for this to work, the new domain needs to have those groups created with the same name as the old domain.
If you want to migrate passwords between domains, you will need the Password Export Server to be installed in the other domain. Since the ADMT does not check the password policy of the new domain, the user will be asked to change their password when they login to the new domain.
See / itfreetraining or itfreetraining.com for our always free training videos. This is only one video from the many free courses available on KZbin.
References
"MCTS 70-640 Configuring Windows Server 2008 Active Directory" pg 573 -- 576
"Active Directory Migration Tool (ADMT) Guide" www.microsoft.c...
"Active Directory Migration Tool (ADMT) Guide " www.microsoft.c...

[@itfreetraining]

Glad you like the videos. You can use the Easy Transfer Wizard if you want to move user information from one computer to another. This includes bookmarks, desktop icons etc. ADMT is about moving user accounts between domains. It does not move user data.

[@itfreetraining]

Thanks very much and thanks for watching.

[@rajeshbabu6789]

You are a boon to IT professionals.

[@itfreetraining]

Thank you for the excellent feedback!

[@itfreetraining]

No problem at all. Thanks for watching.

[@itfreetraining]

Nice to hear and thanks for watching.

[@itfreetraining]

Glad you like the video. If you have a look at the guide, does the version of ADMT support that version on SQL Server. You can also try running it as an administrator to see if this fixes the problem.

[@itfreetraining]

The .net's are independent of each other. Having .net 3 installed does not provide support for .Net 2. So if you don't have .net 2 you need to install it. I would not recommend installing it on a DC, this can cause problems. On a member server is fine. If you find that the latest version of AMDT does not work, try 3.1 or 3.0. You may have less problems. Also I would recommend download the ADMT guide. It has all the requirements in it. ADMT is very picky about requirements.

[@itfreetraining]

Thanks very much and glad to hear that you found the video useful.

[@itfreetraining]

Good to hear. Glad you like the videos.

[@itfreetraining]

ADMT is very particular about which software it will work with.Which ever version do decide to use, you should read the AMDT guide that comes with the version to work out which software it will work with. Just because software is newer does not mean that it will work.

[@itfreetraining]

You only need to install ADMT in the one domain. PES needs to be installed in any domain that you plan to migrate passwords from.

[@itfreetraining]

That is correct. You can use USMT on Windows Server 2008 to transfer the settings.

[@itfreetraining]

You can try USMT in Windows Server 2008. It is part of WIAK which you can download from Microsoft.

[@itfreetraining]

It sounds like it is having a problem resolving the Domain Controller. Check all you DNS settings and make sure they are correct. If you are using IPv4 and IPv6 maybe trying disabling IPv6 when you are running ADMT. Sometimes this causes issues with resolving and routing. At least I have problems sometimes maybe because I have IPv6 partially setup.

[@piurek10]

Now I know you are from Australia! Its why your accent is so good.

[@itfreetraining]

I would personally promote the second server to a domain controller. Move over DHCP. If you are using Active Directory integrated zones the process of moving DNS is quite easy. Once you are happy the new server is working, demote the old server to a member server and remove it from the network if required.

[@mikhosamy]

Thank you guys for the outstanding videos and the constant support from your side. :)

[@shahabemal7588]

this is the best way to learn thanks from all of you team it is very good

[@TravelIndiaSolo]

Beautiful.. This is exactly what I needed. Always find your channel helpful. Thanks a lot!

[@itfreetraining]

+RaVi SrIvAsTaVa (Ramo) Thank you, we're glad you find our videos helpful. Thanks for watching.

[@Ikikay70]

Really Really helpfull !!! Thanks a lot, I'm apprentice, my tutor ask me to configure, and documente how to use ADMT (and I did not know what it was) It was really clear, and the subtitle help me a lot (i'm french ^^') So really, thanks :)

[@itfreetraining]

You're most welcome! We're ecstatic to hear that it helped you so greatly. It's why we make videos!

[@itfreetraining]

What do you mean migrating group?

[@itfreetraining]

We would have created a stub zone or conditional forwarding. From memory, it was a while ago that we created this video, we used a stub zone. The domains are connected by a forest trust so there are no connected by an internal trust. This forest trust would need to be created.

[@TCmoru]

Excellent video, and still very relevant as ADMT is still on version 3.2

[@itfreetraining]

That's great to hear. Thanks for the feedback!

[@karlcooper8052]

I also would like to say thank you for the excellent video. It is obvious a lot of time and effort went in to it. I would like to ask two tiny questions though. 1. When moving user accounts, I remember reading somewhere that local profiles could be moved as well, but will it also move the profile folder and settings (desktop icons, bookmarks, etc..)? 2. Is there anyway to migrate between two servers in same domain? Probably not but thought I should ask. Thank you in advance.

[@karlcooper8052]

Thanks for the assistance. From what I have read the Easy Transfer Wizard will not run on Server 2008.

[@superpiyok]

this video is awesome! I'm looking a tutorial similar to this one.. kudos to the author...

[@itfreetraining]

Thanks very much.

[@krish7618]

Thank you for the wonderful presentation.

[@itfreetraining]

No problem at all. Thanks for watching.

[@deepkhaira9503]

Very Clear quick to the point. Thanks heaps

[@itfreetraining]

You're most welcome!

[@thekuma1027]

Thanks for all these videos.....Thanks again....u really doing good work

[@rvivekanandan2177]

Nice video to understand the AD migration.

[@itfreetraining]

+Vivekanandan R Thanks!

[@shonalipawar4273]

This is great tool when company name changes!!

[@tosatole]

Hi! I like the video very much ! I have one question: can I use this method to replace old server with a new one , without wasting my time with the client computers and singing them to the domain?

[@itfreetraining]

This tool is more for moving objects between domains

[@itfreetraining]

It may be a problem with how the trust was set up. I have send you are message with a link to an article that may help you.

[@dog1839]

I have one question: If i decided to install ADMT 3.2 on a member server do i need to install it on all child domains or just install it on one domain and while starting we will use run-as option to open ADMT and move object from sours to destination, and yes i will install PES in all domains

[@itfreetraining]

You can use USMT for Windows Server 2008. Depending on what you want to move you could just copy the files. For example, copying desktop shortcut and application settings. Registry settings are a little more complicated but not impossible. For these it would be easier to use USMT rather than copying.

[@karlcooper8052]

From what I have been reading the Easy Transfer Wizard will not work on Windows Server 2008. If you know of anything else that I can use to move/transfer the local users settings/data please let me know. Thanks.

[@beerman1957]

These are very helpful videos. Thanks.

[@OrkhanMammadoff]

Hi great video. i just have one question how your different domains are contacted with each other? because i got an error message target domain could not be contacted. Your target domain is also in this forest? how it is possible thanks a lot

[@xcalibursword]

Hey, I didnt understand why did you insisnt on downloading SQL EXPRESS 2k8 and not SQL EXPRESS SK8 R2? If it's more compatible why not use it?

[@leefish1981]

I have enabled sid histor and confirmed its working but i cant access resources in the source domain. there is a 2 way external trust in place and I have tried to disable sid filtering but it will not work from the source domain. only the target. acccess denied comes up.

[@BugsbunnyEh]

I cannot install its asking Net 2 sp2 i already installed Net 3.0 but this is my DC ? is that the problem ? do i have to install it on non active directory ? please replay

[@stanbalog354]

At 1:30, I think you wanted the word "prerequisite" in the text. A perquisite is a bonus to employment like free coffee.

[@itfreetraining]

Opps, sorry that was a typo. Thanks for taking the time to put a timecode in the comment, this helps us a lot when people are making comments about the videos to work out what they are referring to.

[@TheMusang26]

Hello ITFreeTraining! Good day to you! Got one question... Where did you install the sql and admt? on the source or target machine? Many thanks in advance!

[@exchanger2012]

+Francis Steven Aguila in the video shows that was installed in a member server since both domains has a trust forest can be installed in a member server belonging to any of these domains

[@itfreetraining]

+exchanger2012 Thanks for mentioning that.

[@ariaulia7075]

I want to migrate the resource group and also the user inside that group. is it possible to do it?

[@nacuesta]

Thank you for all this works! I am benefiting a lot. One question, what happened to number 46? Why is it private? Thanks again!

[@itfreetraining]

Glad you like the video. I have removed 46 from the playlist.

[@sufian3s]

First there is no word i can say to thank you, But I Have questions: what should I do if i want to migrate the AD to another Server and want it to have the same exact domain name? in another words, I need to migrate AD,DNS,DHCP to new server that have the same exact name and configuration of the old one. I am just getting confused if i want to migrate old server to a new server and i want it to have the same domain name and configurations. Thanks again.

[@itfreetraining]

Thank you.

[@itfreetraining]

Thanks very much.

[@bergshiretech]

So from old domain to sql server to new domain right?

[@potpal]

Hi, I notice that when doing “fix membership of group ” through group account migration wizard it will not add contact objects to the membership only user objects. Do you know of a fix or work around for this?

[@deuge]

Thanks a lot for the information!

[@itfreetraining]

You're very welcome!

[@akhilpkd89]

Very helpful video, thanks a lot

[@itfreetraining]

You're very welcome!

[@binarytech8457]

Is two way forest trust required to make it work?

[@itfreetraining]

You should be able to get it to work with one way trust.

[@SoporteITSS]

when I complete de migration wizzard in the log registry appears: It has not created the object in the target domain hr=0x80070005 Deny access. Can you help me about. Thanks.

[@MudasirKhan-kv8xl]

Thnx a lot for this informative video

[@itfreetraining]

No problem at all, thanks for watching.

[@ThePatricioRamirez]

How Can I migrate users if I cannot install ADMT on a DC?. The users will be connected to the new DC

[@biggusbuckus8721]

Thanks a lot, this really helped me out!

[@itfreetraining]

No problem, thanks for watching.

[@itfreetraining]

Thanks.

[@maddogpopp]

Can this tool be used in Oracle EBS? currently using HP Object Migrator to migrate Oracle concurrent programs, value sets, messages, requests sets etc

[@itfreetraining]

I am not familiar with Oracle EBS. ADMT is Microsoft tools can be very particular with which OS's and software it will run on. If you can export data in a format that ADMT can read it is possible, but I would do you research first.

[@ariaulia7075]

can we do the same in migrating group?

[@osborn2003]

that is a very useful video for the AD migration, thank you for sharing:)

[@OrkhanMammadoff]

Thanks a lot. a understood, did like you , and everything worked . awesome video . thanks man (Y)

[@rahulk9853]

Hi Team can you send me some video for migration for server, DFS, file print....with tool like admt and quest. also i unable to download ADMT 3.2 tool please help...

[@CK-zf1lh]

Is there any difference between forest to forest and domain to forest AD migration?

[@itfreetraining]

Of course, as the forest is the collection of AD "trees" (one or more domains and domain trees in a contiguous namespace), you'd be importing an entire AD structure versus importing one part of a forest.

[@EduardoSantos-xn4cp]

Great Video!

[@EdioIlha]

Hello there!! owesome!! Thank you a lot!! I'm getting this error message, and cannot find the solution! Can you tell me what is that? Unable to check for failed actions: DBManager.IManageDB.1 : Unable to retrieve the database file path from the registry. The system cannot find the file specified. Thank you in advance!

[@helloeverybody1234]

Thank You. Great work.

[@metabrez]

very useful.Thanks alot.

[@itfreetraining]

Thanks for watching.

[@ASHKAR69]

I unable to download ADMT 3.2 and 3.1 tool too, please, Could anyone help me?

[@itfreetraining]

What problem are you experiencing.

[@samuelenardi9643]

Can I put two likes? :D Great video! Thank you.

[@itfreetraining]

Thanks for the one like.

[@dog1839]

Good one

[@itfreetraining]

Thank you.

[@catalinmezdrea]

Thanks, useful

[@parvezahmad1986]

Superb ..THX :)

[@itfreetraining]

Thanks very much.

[@حسنطاهر-ز5ط]

طاهر

[@itfreetraining]

Thanks very much and thanks for watching.

[@itfreetraining]

Thanks very much.

[@itfreetraining]

Thank you.

[@talktome2000]

A great video.Thank you so much

[@exchanger2012]

thanks so much for share this valuable video!

[@itfreetraining]

+exchanger2012 You're most welcome. Thanks for watching.

[@itfreetraining]

Thanks very much and thanks for watching.

[@itfreetraining]

Thanks very much.

[@itfreetraining]

Thanks very much.