Module 13: Designing Active Directory Migrations in Windows Server 2008.

Slides:

Advertisements

Similar presentations

Ch-11 Project Execution and Termination. System Testing This involves two different phases with two different outputs First phase is system test planning.

Advertisements

By Rashid Khan Lesson 5-Directory Assistance: Administration Using Active Directory Users and Computers.

Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.

Module 12 Upgrading from Exchange Server 2003 or Exchange Server 2007 to Exchange Server 2010.

Module 1: Installing Windows XP Professional

Staying Secure During an NT to Windows 2000 Migration Paul Hinsberg, MCSE, MBA CEO, CRSD Inc

MCSE Guide to Microsoft Exchange Server 2003 Administration Chapter 14 Upgrading to Exchange Server 2003.

Module 4: Implementing User, Group, and Computer Accounts

Making the move to Windows Server 2003 in the Enterprise Doing More with Less Peter J. Meister Product Manager Windows Server Product Management Microsoft.

11 WORKING WITH GROUPS Chapter 7. Chapter 7: WORKING WITH GROUPS2 CHAPTER OVERVIEW  Understand the functions of groups and how to use them.  Understand.

Chapter 8: Network Operating Systems and Windows Server 2003-Based Networking Network+ Guide to Networks Third Edition.

Chapter 7 WORKING WITH GROUPS.

Getting off NT4… Raj Natarajan National Technology Specialist.

Module 2: Managing User and Computer Accounts

Overview of Active Directory Domain Services Lesson 1.

Module 2 Creating Active Directory ® Domain Services User and Computer Objects.

Module 1 Introduction to Managing Microsoft® Windows Server® 2008 Environment.

Module 1: Introduction to Administering Accounts and Resources

Module 12: Designing an AD LDS Implementation. AD LDS Usage AD LDS is most commonly used as a solution to the following requirements: Providing an LDAP-based.

11 SECURITY TEMPLATES AND PLANNING Chapter 7. Chapter 7: SECURITY TEMPLATES AND PLANNING2 OVERVIEW  Understand the uses of security templates  Explain.

Managing Active Directory Domain Services Objects

Module 6: Designing Active Directory Security in Windows Server 2008.

MIGRATING FROM MICROSOFT EXCHANGE SERVER AND OTHER MAIL SYSTEMS Appendix B.

Module 9: Active Directory Domain Services. Overview Describe new features in AD DS List manageability and reliability enhancements in AD DS.

Designing Active Directory for Security

Module 2 Designing Microsoft® Exchange Server 2010 Integration with the Current Infrastructure.

11 MANAGING AND DISTRIBUTING SOFTWARE BY USING GROUP POLICY Chapter 5.

70-294: MCSE Guide to Microsoft Windows Server 2003 Active Directory, Enhanced Chapter 5: Active Directory Logical Design.

DEP313 Active Directory Restructuring with ADMT v-2

Module 2: Installing and Maintaining ISA Server. Overview Installing ISA Server 2004 Choosing ISA Server Clients Installing and Configuring Firewall Clients.

Module 9: Preparing to Administer a Server. Overview Introduction to Administering a Server Configuring Remote Desktop to Administer a Server Managing.

By Kevin Stevens. Scenario Prepare a presentation for the ADcorp company which has implemented Active Direcotory 2008 (adcorp.local) and how approximately.

Module 2: Managing User and Computer Accounts. Overview Creating User Accounts Creating Computer Accounts Modifying User and Computer Account Properties.

Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.

Module 7 Configure User and Computer Environments By Using Group Policy.

Module 11: Read-Only Domain Controllers. Overview Describe the Read-Only Domain Controllers role Use Read-Only Domain Controllers.

Module 1: Installing Microsoft Windows XP Professional.

Module 2 Creating Active Directory ® Domain Services User and Computer Objects.

Module 12 Upgrading from Exchange Server 2003 or Exchange Server 2007 to Exchange Server 2010.

Module 11 Upgrading to Microsoft ® Exchange Server 2010.

Module 14: Migrating Users from Exchange Server 5.5 to Exchange Server 2003.

Module 3 Creating Groups and Organizational Units.

1 Chapter Overview Managing Object and Container Permissions Locating and Moving Active Directory Objects Delegating Control Troubleshooting Active Directory.

Administering Groups Chapter Eight. Exam Objectives In this Chapter:  Plan a security group hierarchy based upon delegation requirements  Plan a security.

Windows Server 2003 La migrazione da Windows NT 4.0 a Windows Server 2003 Relatore: MCSE - MCT.

MCITP Guide to Microsoft Windows Server 2008 Enterprise Administration (Exam #70-647) Chapter 1 Designing Active Directory Domain Services.

Module 11: Designing an Active Directory Federation Services Implementation in Windows Server 2008.

Chapter 4- Part3. 2 Implementing User Profiles A local user profile is automatically created at the local computer when you log on with an account for.

Module 10: Identity and Access Services in Windows Server 2008 Active Directory.

11 UPGRADING AND MIGRATING TO WINDOWS SERVER 2003 Chapter 12.

CHAPTER Windows Server Management. Chapter Objectives Give an overview of the Server Manager Provide details of accessing the Server Manager Explain the.

Module 7: Designing Security for Accounts and Services.

LINUX Presented By Parvathy Subramanian. April 23, 2008LINUX, By Parvathy Subramanian2 Agenda ► Introduction ► Standard design for security systems ►

Managing Office 365 Identities and Requirements.

Managing User and Service Accounts

Module 9: Preparing to Administer a Server

Overview of Active Directory Domain Services

Implementing Active Directory Domain Services

Microsoft - Managing Office 365 Identities and Requirements

Overview of Active Directory Domain Services

Unit 3 NT1330 Client-Server Networking II Date: 1/6/2016

"Migration from Windows NT to Windows 2000 : A hands on approach"

Unit 7 NT1330 Client-Server Networking II Date: 7/26/2016

Active Directory Overview

ACTIVE DIRECTORY An Overview.. By Karan Oberoi.

Module 8: Implementing Group Policy

Module 9: Preparing to Administer a Server

Module 1: Overview of Systems Management Server 2003

Presentation transcript:

Module 13: Designing Active Directory Migrations in Windows Server 2008

Module Overview Choosing an Active Directory Migration Strategy Designing a Domain Upgrade Strategy Designing a Domain Restructure Strategy

Lesson 1: Choosing an Active Directory Migration Strategy AD DS Migration Strategies Criteria for Choosing a Migration Strategy Guidelines for Choosing the Domain Upgrade Strategy Guidelines for Choosing the Domain Restructure Strategy Guidelines for Choosing the Domain Upgrade and Restructure Strategy

AD DS Migration Strategies Active Directory migration strategies include: Domain upgrade strategy Domain restructure strategy Domain upgrade and restructure strategy

Additionally, when choosing a migration strategy, consider: Current domain structure Amount of acceptable downtime Time and budget constraints Criteria for Choosing a Migration Strategy StrategyConsiderations Domain Upgrade No impetus for major change No domain hierarchy to restructure (such as a single domain forest) Restructuring is too complex and expensive Domain Restructure Current structure is too complicated Current structure no longer satisfies the business requirements Will achieve cost savings over time Business can accept risk of restructure Domain Upgrade and Restructure Most likely route in a restructuring Some domains will be untouched Other domains will be collapsed Current structure is too complicated Current structure no longer satisfies the business requirements Will achieve cost savings over time Business can accept risk of restructure

Guidelines for Choosing the Domain Upgrade Strategy Choose the domain upgrade strategy when: The existing domain structure and the target domain structure are the same The existing domain structure meets the business and technical needs of the organization The domain names must remain the same The organization requires the migration path with the lowest risk The migration must be completed in the least amount of time possible

Guidelines for Choosing the Domain Restructure Strategy Choose the domain restructure strategy when: The existing domain structure does not meet the business and migration goals of the organization The organization cannot tolerate any downtime to the production directory services environment The organization can incur some degree of risk to achieve an optimum domain structure There is enough time to complete the additional tasks involved with a restructure There is additional hardware available

Guidelines for Choosing the Domain Upgrade and Restructure Strategy Choose the domain upgrade and restructure strategy when: The existing domain structure is similar to the proposed Active Directory domain structure The organization wants to use certain Active Directory features early because of the benefits that they provide The organization wants to lower short-term hardware and administrative costs The organization is averse to risk but does not want to keep its existing domain model long-term

Lesson 3: Designing a Domain Restructure Strategy SID History Active Directory Migration Tool ADMT Scenarios Preparing a Domain to Run ADMT Guidelines for Restructuring Domains

SID History Domain ADomain B User migrates from Domain A to Domain B 1 1 SID History attribute allows user to access resources in Domain A 2 2 SID history provides a migrated user with continuity of access to resources

Active Directory Migration Tool ADMT v3 supports the following tasks for completing domain migration: Security translation on migrated computer accounts Reporting to view the results of the migration events Functionality to undo the last migration and retry the last migration User account migrationGroup account migration Computer account migration Service account migration Trust migrationExchange directory migration

ADMT Scenarios You can use ADMT v3 to migrate users, groups, and computers in following scenarios: From Windows NT 4.0 domains to Active Directory domains Between Active Directory domains in different forests Between Active Directory domains in the same forest

Preparing a Domain to Run ADMT To prepare a domain to run ADMT, you must: Establish required trusts Configure the source and target domains to migrate SID history before you begin an interforest migration Establish migration accounts Configure the target domain OU structure Install ADMT in the target domain Install high-encryption software