ADMT (Active Directory Migration Tool) Domain Migration ‚Äď Part 3
May12

ADMT (Active Directory Migration Tool) Domain Migration ‚Äď Part 3

KB ID 0001307 Dtd 11/05/17 Problem Seems like ages since I wrote Part Two, now we are ready to actually start moving objects from one domain to another. Solution ADMT: Service Account Migration Why would you want to do this first? Well this replaces any service accounts on the OLD domain machines with migrated service accounts form the NEW domain, so when the client machines, (or servers,) are migrated they’re already using the...

Read More
ADMT (Active Directory Migration Tool) Domain Migration ‚Äď Part 2
May06

ADMT (Active Directory Migration Tool) Domain Migration ‚Äď Part 2

KB ID 0001306¬†Dtd¬†06/05/17 Problem Back in Part One we setup our migration admin account, and installed ADMT. Now, as I’m going to migrate the users passwords I need a ‘Password Export Server‘, but first I need to tackle the subject¬†of user SIDs ¬† Solution Domain Migrations and SID Filtering Every user has a SID (Security Identifier) it’s the thing AD uses to refer to and apply security to users, (and other...

Read More
ADMT (Active Directory Migration Tool) Domain Migration – Part 1
Apr25

ADMT (Active Directory Migration Tool) Domain Migration – Part 1

KB ID 0001305 Dtd 25/04/17 Problem I’ve not used ADMT for ages, I’ve got a domain migration to do soon, so I thought I’d get on the bench and have a reminder. Although ADMT 3.2 was ‘re-jigged’ to support Server 2012 R2, I’m still going to install it on Server 2008 R2. I’ve got a test domain built to migrate from, and a new domain setup ready to migrate into. Old/Source Domain: olddomain.com...

Read More
Users Cannot Access Public Folders Post Migration (Exchange 2016)
Mar29

Users Cannot Access Public Folders Post Migration (Exchange 2016)

KB ID 0001295¬†Dtd 29/03/17 Problem This post comes form my colleague Andrew Dorrian, he usually follows my migrating public folders article. Recently after a couple of Exchange 2016 migrations he has seen a problem where the public folders are visible in the Exchange Admin Console, but the users can’t access them. Solution Open ADSIedit.msc and connect to the ‘Configuration’ context. Navigate to; CN=Services >...

Read More
Can A Domain Trust Another Domain With The Same ‘Root Domain’ Name?
Mar07

Can A Domain Trust Another Domain With The Same ‘Root Domain’ Name?

KB ID 0001288 Dtd 07/03/17 Problem About a month ago I was with a client to do some investigation/consultancy, they were a large company with their head office in the UK and a number of other offices around the world. They had a number of domains and sub domains and wanted to consolidate them all into a new domain. Well that’s all OK, but the UK company has been purchased by a large American company, who were putting a lot of...

Read More
Windows – A Delegation For This DNS Server Cannot Be Created
Mar06

Windows – A Delegation For This DNS Server Cannot Be Created

KB ID 0001287¬†Dtd¬†06/03/17 Problem When promoting¬†a server to be a domain controller, you might see the following error, “A delegation for this DNS server cannont be created because the authoritative parent zone cannot be found or it does not run Windows DNS server. If you are intergrating with an existing DNS infrastructure, you should manually create a delegation to this DNS server in the parent zone to ensure reliable name...

Read More