1. Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: Corrado.Cappucci@pipeline.it MCSE - MCT

2. Completing the Restructure Process

3. Why Reconfigure Access to Shared Resources? After reconfiguring permissions on shared resources, the SID-History attribute is no longer required Use Security Translation Wizard to replace the source domain SIDs Clear the SID-History attribute

4. How to Reconfigure Permissions on Shared Resources To reconfigure DACLs on shared resources: Log on as Administrator 1 1 Complete the reconfiguration of permissions 3 3 Start ADMT and then open the Security Translation Wizard 2 2 To verify access to the shared resource: Log on as a migrated user 1 1 Open a file in the shared folder 2 2 Run the Security Translation Wizard 1 1 On the Computer Selection page, click Remove 2 2 ADMT resolves the entries 3 3 To resolve member names in the account domain: Create a file in the shared folder 3 3

5. How to Clear the SID-History Attribute for Migrated Accounts cscript.exe ClearSidHistory.vbs -n=My Contact To clear the SID-History of an object called My Contact: To clear the SID-History of an object called Computer1: cscript.exe ClearSidHistory.vbs -n=Computer1 -o=computer To clear the SID-History of an object belonging to the object category of person and the object class of user: cscript.exe ClearSidHistory.vbs -n=James Smith -o=Person -c=user cscript.exe ClearSidHistory.vbs -n=name [-o=objectCategory] [-c=objectClass] To run the ClearSidhistory.vbs script:

6. How to Decommission Windows NT 4.0 Source Domains Remove all trust relationships 1 1 Disable all accounts created in previous migration steps 3 3 Repurpose any remaining account domain controllers 2 2 Best practice: Retain a full system backup of the PDC for each decommissioned Windows NT 4.0 domain