Migrating Contacts from one domain to another?

Tutorials Win: Microsoft Windows Forum

- Previous
  - 1
    - Server Access Rights When I have a "member" server, I create a group in AD for admining the server. I then put this group in the server's local Admin Group. This works fine. However, how do I do this for a server that is one of my domain controllers? They don't have local account & groups? Obviously, this is not an issue for (as the domain admin), but it is an issue if I want to have someone have admin rights for just a specific server. Any help would be appreciated. Tag: Migrating Contacts from one domain to another? Tag: 130929
  - 2
    - remove sub-domain on root domain Hi All, I have problem on AD, we have sub-domain A.abc.com, on this domain contoller already delete on this domain ,remove this domain not choose this DC is last server , so i use the ADSI connect to domain abc.com , i can see the domain on ADSI , i cannot create user , if the username as same as a.abc.com , but i cannot delete the username on a.abc.com , becuase this domain is remove , how to remove this domain on AD , i try ntdsutil metadata cleanup , but no success , how to remove , i cannot create many user account on domain abc.com , Help ..........Thanks, NTDSutil command select operation target: list site Found 10 site(s) 0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sml,DC=com 1 - CN=Korea,CN=Sites,CN=Configuration,DC=sml,DC=com 2 - CN=Thailand,CN=Sites,CN=Configuration,DC=sml,DC=com 3 - CN=HongKong,CN=Sites,CN=Configuration,DC=sml,DC=com 4 - CN=RPDI,CN=Sites,CN=Configuration,DC=sml,DC=com 5 - CN=Vietnam,CN=Sites,CN=Configuration,DC=sml,DC=com 6 - CN=DR_Site,CN=Sites,CN=Configuration,DC=sml,DC=com 7 - CN=US,CN=Sites,CN=Configuration,DC=sml,DC=com 8 - CN=China-DG,CN=Sites,CN=Configuration,DC=sml,DC=com 9 - CN=UKC,CN=Sites,CN=Configuration,DC=sml,DC=com select operation target: select operation target: select domain 5 No current site Domain - DC=china-dg,DC=sml,DC=com No current server No current Naming Context select operation target: list site Found 10 site(s) 0 - CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=sml,DC=com 1 - CN=Korea,CN=Sites,CN=Configuration,DC=sml,DC=com 2 - CN=Thailand,CN=Sites,CN=Configuration,DC=sml,DC=com 3 - CN=HongKong,CN=Sites,CN=Configuration,DC=sml,DC=com 4 - CN=RPDI,CN=Sites,CN=Configuration,DC=sml,DC=com 5 - CN=Vietnam,CN=Sites,CN=Configuration,DC=sml,DC=com 6 - CN=DR_Site,CN=Sites,CN=Configuration,DC=sml,DC=com 7 - CN=US,CN=Sites,CN=Configuration,DC=sml,DC=com 8 - CN=China-DG,CN=Sites,CN=Configuration,DC=sml,DC=com 9 - CN=UKC,CN=Sites,CN=Configuration,DC=sml,DC=com select operation target: select site 8 Site - CN=China-DG,CN=Sites,CN=Configuration,DC=sml,DC=com Domain - DC=china-dg,DC=sml,DC=com No current server No current Naming Context select operation target: list server in site Found 0 server(s) select operation target: ? ? - Show this help information Connections - Connect to a specific domain controller Help - Show this help information List current selections - List the current site/domain/server/Naming Cont ext List domains - Lists all domains which have Cross-Refs List domains in site - Lists domains in the selected site List Naming Contexts - Lists known Naming Contexts List roles for connected server - Lists roles connected server knows about List servers for domain in site - Lists servers for selected domain and site List servers in site - Lists servers in selected site List sites - List sites in the enterprise Quit - Return to the prior menu Select domain %d - Make domain %d the selected domain Select Naming Context %d - Make Naming Context %d the selected Naming Cont ext Select server %d - Make server %d the selected server Select site %d - Make site %d the selected site select operation target: q metadata cleanup: ? ? - Show this help information Connections - Connect to a specific domain controller Help - Show this help information Quit - Return to the prior menu Remove selected domain - Remove DS objects for selected domain Remove selected Naming Context - Remove DS objects for selected Naming Context Remove selected server - Remove DS objects for selected server Remove selected server %s - Remove DS objects for selected server Remove selected server %s on %s - Remove DS objects for selected server Select operation target - Select sites, servers, domains, roles and naming contexts metadata cleanup: remove selected domain ? Error 80070057 parsing input - illegal syntax? metadata cleanup: remove selected domain china-dg.sml.com Error 80070057 parsing input - illegal syntax? metadata cleanup: remove selected domain DsRemoveDsDomainW error 0x2015(The directory service can perform the requested o peration only on a leaf object.) metadata cleanup: Tag: Migrating Contacts from one domain to another? Tag: 130915
  - 3
    - Setting-up User settings As our company is expanding rather quick there are a couple of task that i would like to automate to reduce the time we spend on each new PC or user. 1. for each new user on a pc (we have no roaming profile) we must setup all the printers manually. How can i add all the printers to be added automatically for all users? 2. we also have a couple of shared drives on the server which we Map as Network Drives, including the users home directory which is pointed as their My Documnets as well. How can i add these network drives automatically and how can we add the users home drive and point their my documents to this drive. i hope i have made my question clear! and many thanks in advance Tag: Migrating Contacts from one domain to another? Tag: 130911
  - 4
    - LDAP Query for a DC Hi, I am trying to ensure complete removal a DC from AD due to a few issues after DCPROMO removal. I am trying to locate an LDAP query that will locate any objects that reference the DC so that i can delete them from AD, perhaps using ADSIedit or other tool. Does anyone know how I can acheive this, or suggest an LDAP query thanks Tag: Migrating Contacts from one domain to another? Tag: 130903
  - 5
    - How to kill an old group policy? I work for a company that has ALL of their policies sitting in the Default Domain policy. Im currently working through cleaning and spliting them up into individual policies. The one im stuck on right now is the Proxy Settings policy. I have created a new policy on its own,with all of the settings that previously lived in the Default domain policy. Problem is, when i remove the settings from the default domain policy, no one gets the Proxy settings, even though the policies are being applied at the same level. I do an RSOP, and i can see the old policy looks like it is still hanging onto the fact it once had these proxy settings, but now that ive disabled them, it is now remving the settings, and taking precendence over the new Proxy policy. How do you completely remove reference from a group policy?Im guessing that because this is the default domain policy, it is behaving differently. Any help is appreciated!! Tag: Migrating Contacts from one domain to another? Tag: 130901
  - 6
    - Qestion about development environment Hi, We are developing an application that authenticates users based on LDAP queries. To do this we need to create lots of test users. We prefer **not** adding all the users to our main AD branch. Can we add a child branch to our main AD domain, with restricted administration right so we can do our experiment without being member of main domain admin group? Thank you, Max Tag: Migrating Contacts from one domain to another? Tag: 130895
  - 7
    - Qestion about development environment Hi, We are developing an application that authenticates users based on LDAP queries. To do this we need to create lots of test users. We prefer not adding all the users to our main AD branch. Can we add a child branch to our main AD domain, with restricted administration right so we can do our experiment without being member of main domain adminz Tag: Migrating Contacts from one domain to another? Tag: 130894
  - 8
    - Getting a new Domain Controller Hi, I am getting a new server intended to replace my existing Windows 2000 server I need to verfiy the process aof adding this new server 2003 and what needs tobe done to get my active directory onto this new server appreciate any help Tag: Migrating Contacts from one domain to another? Tag: 130887
  - 9
    - rights not percolating For some reason rights I am assigning to users in active directory are not being passed. I assigned administrator rights to one user so he could make some changes to his PC and his level did not change on the local machine. Same problem with other users, they are only retaining the rights asigned when the login was created. We are running a single server (2003) with about 10 users on its own isolated domain, I am not an AD expert so any tips or troubleshooters would be apreciated! Tag: Migrating Contacts from one domain to another? Tag: 130884
  - 10
    - AccessCheck function fails in multi domain environment I am trying to use authorization function "accesscheck" for a user to access the resource which is in the other domain, But accesscheck function denies the access. Example Suppose there are 2 domains with trust. share object is on Domain 1 and need to access this object from Domain 2. When the user from any Domain having access rights to share oject login to Domain2 then he gets the access token from domain2. We use function AccessCheck(which check access) functions which denies the access and in my knowledge it does not work across domain. Which function should I use to fix this problem. Tag: Migrating Contacts from one domain to another? Tag: 130883
  - 11
    - How to Configure localgroup into Group Policy Hi there: I know that you can use restricted groups in group policy to assign domain groups to be members of the localgroup on computers in the domain. When the restricted group dialogue boxes prompt me I can't figure out how to include "localgroup" in there. It appears that it only allows me to select groups from the domain only. Any help would be great! I would settle for using the "c> net localgroup administrators "dom\vir users" /add" command but it doesn't like groups that have a space in the name eventhough I have quotes around it. Please help. Thanks, Charles Tag: Migrating Contacts from one domain to another? Tag: 130881
  - 12
    - Help with secondary email address setup in W2K AD and Exchange 200 We have someone who just got married and changed her last name. So we are trying to add her new email address as the primary email address in Windows 2000 AD link with Exchange 2003. We used to just able to add the new email and set it as the primary and that's it. And when we go into Outlook and type in newname@domain.com it will automatically find it in address book and convert it to "first name, last name" as it's being sent as an internal email. However, now it's not doing it? A X.400 setting is now created for the secondary address so I went in and manually added it. The email will work if I find her new name in the address book and pick it from list but if I type in user@domain.com, it won't work where I will get a 5.1.1 error message. We noticed weird problem started happening after we moved the Exchange server from the "computer" OU to a new OU we created and since then moved it back to the "computer" OU.. any help? Thanks! Tag: Migrating Contacts from one domain to another? Tag: 130880
  - 13
    - IPSec GPO -- Cannot Save Sorry, had trouble finding a GPO group. I'm interested in applying an IPsec policy via GPO, but have found that I cannot save any changes. I had assumed the new policy options in Vista/2008 would allow multiple Active Directory IPsec policies, unlike the 2003/XP policy options, and allow to save them as any other GPO. I was wondering if the saving issues I'm having (if so) are permissions related, as I am not a domain admin (only OU administrator), and if so, is there any way to add specific targetted permissions to my account which would allow saving of the IPSec GPO to my OU. Thanks all. Tag: Migrating Contacts from one domain to another? Tag: 130877
  - 14
    - Getting the DN ( distingished name) using Taskpad parameters I am trying to get the DN of a user account via a ADUC and an attached taskpad. Though able to reconstruct the DN from the $NAME<0> $NAME<1> etc parameters - the DN required for DSGET does not like commas hence any commas have to have a "\" infront. My question - is there an easier way of getting the full DN of a user account using a taskpad ? a second question - are there any other variables apart from $COL and $NAME ? many thanks Martin Tag: Migrating Contacts from one domain to another? Tag: 130876
  - 15
    - Disabled Office XP "Recently used list" via Group Policy. How do I go about disabling office XP "Recently used list" via GP? This is what I have done but it's not working? So far, I have downloaded the Office XP ADM, Word.ADM, Excel.ADM, PPT.ADM, and Access.ADM. On AD, I created a "Users" OU and a new GP labeled "Disable Office Feature" in that OU. For the "Disabled Office Feature" GP, I added the "Word.ADM" and in the "Recently used list" I have it setup to be "disabled." I then moved my own account to that new "Users" OU and did a gpupdate/force on my system, which promoted me to reboot. After reboot, I did a gpresult and see that the new GP was applied on my system. However, when I go into MS Word, I'm still seeing the "recently used list." Am I doing something wrong? Please help! Thank you in advance for your help! Tag: Migrating Contacts from one domain to another? Tag: 130875
  - 16
    - user account locked up frequently a user complained that her AD user account got locked up frequently. How can I troubleshoot what the cause could be? Maybe she changed her password and some software is still using the old one. Anyway, need to find a way to tell what is the cause and where it's from (the machine). Thanks. Tag: Migrating Contacts from one domain to another? Tag: 130874
  - 17
    - User Creation with VBS how to add to Group Dear All (Also posted this in VBScript as i dont know which applies more !!) Below is a full copy of my code to date which seems to work nicely. Im still tinkering with it as parts are yet to be added home dir etc. Basically it pulls users from a CSV and creates their accounts. However how on earth do i add them to a group....???? Every user will by default need to be a member of the "students" Group so can this be hardcoded somehow..? Then they need to be a member of a more specific group pertaining to that class only. Ideas anyone..? Cheers Paul --------------------------------------------------------------------------------------------- Option Explicit Dim sCSVFileLocation Dim sCSVFile Dim oConnection Dim oRecordSet Dim oNewUser ' Variables needed for LDAP connection Dim oRootLDAP Dim oContainer ' Holding variables for information import from CSV file Dim sLogon Dim sFirstName Dim sLastName Dim sDisplayName Dim sdescription Dim sNAME Dim sPassword Dim nPwdLastSet Dim nUserAccountControl ' Used to enable the account Dim sDomain ' Modify this to match your company's AD domain sDomain="mydomain.co.uk" ' Input file location sCSVFileLocation = "C:\Scripts\" 'KEEP TRAILING SLASH! ' Full path to input file sCSVFile = sCSVFileLocation&"User.csv" ' Commands used to open the CSV file and select all of the records set oConnection = createobject("adodb.connection") set oRecordSet = createobject("adodb.recordset") oConnection.open "Provider=Microsoft.Jet.OLEDB.4.0;Data Source= " & sCSVFileLocation & ";Extended Properties=""text;HDR=yes;FMT=Delimited""" oRecordSet.open "SELECT * FROM " & sCSVFile ,oConnection ' Create a connection to the Active Directory Users container. Set oRootLDAP = GetObject("LDAP://rootDSE") Set oContainer = GetObject("LDAP://ou=StudentsGP," & _ oRootLDAP.Get("defaultNamingContext")) ' Allows processing to continue even if an error occurs (i.e. dup user) ' We put this below the CSV and AD information since processing can ' continue with a single bad record, but not if there is a problem with ' the CSV file or AD connection on error resume next do until oRecordSet.EOF ' Reads the values (cells) in the sInputFile file. ' --------- Start creating user account ' Read variable information from the CSV file ' and build everything needed to create the account sFirstName = oRecordSet.Fields.Item(1).value sLastName = oRecordSet.Fields.Item(2).value sLogon = sFirstName&"."&sLastName sDisplayName = sFirstName&" "&sLastName sPassword = oRecordSet.Fields.Item(3).value sdescription = oRecordSet.Fields.Item(4).value sNAME = oRecordSet.Fields.Item(5).value ' Build the User account Set oNewUser = oContainer.Create("User","cn="&sFirstName&" "&SLastName) oNewUser.put "sAMAccountName",lcase(sLogon) oNewUser.put "givenName",sFirstName oNewUser.put "sn",sLastName oNewUser.put "UserPrincipalName",lcase(SLogon)&"@"&sDomain oNewUser.put "DisplayName",sDisplayName oNewUser.put "description",sdescription oNewUser.put "name",lcase(sLogon) oNewUser.put "scriptPath",sNAME ' Write this information into Active Directory so we can ' modify the password and enable the user account oNewUser.SetInfo ' Change the users password oNewUser.SetPassword sPassword oNewUser.Put "pwdLastSet", 0 ' Enable the user account oNewUser.Put "userAccountControl", 512 oNewUser.Put "userAccountControl", 66048 oNewUser.SetInfo ' Used only for debugging if err.number = -2147019886 then msgbox "User logon " & sLogon & "already exists" end if oRecordSet.MoveNext loop ----------------------------------------------------------------------------------- Tag: Migrating Contacts from one domain to another? Tag: 130852
  - 18
    - LDAP Null Base Can you please suggest me how to resolve LDAP null base security vulnarability reported by port scan? http://xforce.iss.net/xforce/xfdb/1425 Tag: Migrating Contacts from one domain to another? Tag: 130847
  - 19
    - restore a machine from saved state not work I have a virtual server2005 R2 sp1 and have machines on "saved state" and "undo disk" enabled" when i try to restore the save state for the hard drive, and i am getting a HTTP Error 502.1 - bad gateway. and the browser just hang. does anyone know this issue and is there any fix? Tag: Migrating Contacts from one domain to another? Tag: 130843
  - 20
    - DIGITAL TV DIGITAL TV http://digitaltvtech.blogspot.com Tag: Migrating Contacts from one domain to another? Tag: 130840
  - 21
    - Remote Control permissions prompt Options Hi, I have a terminal server user. See print screen below http://www.box.net/shared/agdpk5n48s in AD the Enable remote control is enabled and the require user's permission is not checked (i.e disabled). Yet, I get prompted for the user's password when I try to remote control a user. Is their another place that one needs to change the settings? Thanks Tag: Migrating Contacts from one domain to another? Tag: 130835
  - 22
    - Automatically Adding Domain Groups into Local Administrators group By default when a computer is added to a domain the domain admin group is added to the local computers administrators group. I would like to automatically add my IT support group to the local computers administrators group. Is there a way to do this before and/or after joining a computer to a domain without having to manually touch each and every computer to do a manual add?? It appears that in group policy restricted groups would be the place but I can't figure out how to enter or designate the local administrators group so then I could stick in the domain\group inside it. Thanks Much, Charles Tag: Migrating Contacts from one domain to another? Tag: 130823
  - 23
    - Group Policy and Domain Type Problem Hi everybody, We're having a problem on our Active Directory, we can not edit GPOs which have been defined previously including Default Domain Policy and Default Domain Controllers Policy as well. When we try to edit it, it says; "Failed to open the group policy object. You may not have appropriate rights." Detail: "The system can not find the path specified." Then, we try to change the security settings of related GPO , we remove some and add another, finally when we try to Apply or click Ok, then it says; "Unable to save permission changes on {....-.....-......-......}" "The system can not find the file specified." We can create new GPOs and edit them successfully, there is nothing wrong with the new created ones. We're using administrator account to try all of them above.. Thanks in advance.. Tag: Migrating Contacts from one domain to another? Tag: 130815
  - 24
    - Server share login I have added a W2003R2 domain controller to our network. A new share has been created on the server. When I attempt to browse to the share, clicking on the server asks for my user name and password (which will work OK). Any of the other shares on the network do not require entering username/password. So apparently, when you browse to a share it normally automatically authenticates but for some reason it doesnt on this server. Does anyone have any ideas of what I am missing here? -- Regards Thomas Tag: Migrating Contacts from one domain to another? Tag: 130811
  - 25
    - 2003 CA in a 2008 Mixed Mode Domain Can a 2003 Enterprise Root CA exist in a 2008 Mixed Mode Domain? We currently are running our Active Directory Domain in Windows 2003 Native Mode and have 2003 CA's in place. We are looking to upgrade to introduce a couple of Windows 2008 Domain Controllers into our existing domain. In the 2008 mixed mode can a 2003 Enterprise Root CA still function or does it need to be migrated to 2008? Tim Humphrey Tag: Migrating Contacts from one domain to another? Tag: 130810
- Next
  - 1
    - DNS server issue Hi Site: Windows 2003 SP2 DC, DNS, DHCP Client : Win XP SP2 i was configured dns server in the dc & afterward due to some reason i had changed the DC name. (Like from skb.com to sk.com).So i promoted the DC & its working fine with all components. But i got repeated error in DNS server eventvwr as: "The DNS server was unable to open zone _msdcs.SKB.COM in the Active Directory from the application directory partition ForestDnsZones.SKB.COM. This DNS server is configured to obtain and use information from the directory for this zone and is unable to load the zone without it. Check that the Active Directory is functioning properly and reload the zone. The event data is the error code." i am not using the skb.com dns server right now. How can i solve? the Event ID is : 4007 Rajaguru Tag: Migrating Contacts from one domain to another? Tag: 130795
  - 2
    - DHCP Dynamic updates issue Hi my site: windows 2003 SP2 DC, DNS, DHCP ip range: 192.168.1.1 - 192.168.1.250 / 255.255.255.0 ip exclusion : 192.168.1.1 to 192.168.1.25 my client machines are : windows XP SP3. Suddenly i noticed the dns records are not updated in the dns server. the dhcp server leased ip addresses to the clients. In DHCP the icons of the computers have a pencil in it & it means " Active lease, DNS dynamic update pending. This address is not available for lease by the DHCP server" I am enabled "Always dynamically update DNS A and PTR records" in the DNS tab of DHCP properties. What does it mean? how to solve this? Help me out. Rajaguru Tag: Migrating Contacts from one domain to another? Tag: 130781
  - 3
    - LDAP search on multiple forest Hi I have two forests and each has a single domain (a.com and b.com). Both are trusted. a.com has a user a@a.com. b.com has a user b@b.com When I connect using LDP tool to the GC of a.com, I can bind and authenticate as a@a.com. I can also bind and authenticate as b@b.com. But I could only get LDAP attributes only for a@a.com. How can I get the LDAP attributes (say mail or proxyAddresses) for b@b.com? What should be the search query? Thanks. UNT, Jag Tag: Migrating Contacts from one domain to another? Tag: 130779
  - 4
    - windows server events hi all, can any one tell me the name of any site where all the events generated in windows server 2003 event viewer can be found with solution( like event id and solution.)so i can save my time and increase productivity. site that contain only event ,cause and solutions. Tag: Migrating Contacts from one domain to another? Tag: 130770
  - 5
    - group policy hi all, we are using win 2003 sbs environment.i applied a one group policy for whole domian to block usb access,cd/dvd read write access .but my policy is not working. step for to apply usb block template . add the template in admin template in user configuration e.g usb.adm and applied this as group policy. Tag: Migrating Contacts from one domain to another? Tag: 130768
  - 6
    - Rpc in unavailable hi all, we are using server 2003 sbs. i have one dc and adc .last week i restored the system state backup on dc . dc and adc runnig fine but when i click on replicate now on nts setting for replication the action show that rpc server is unavailable. and 1 more that when i tried to raise the function lavel of my domin it also shows an arror that rpc server is unavailable. Tag: Migrating Contacts from one domain to another? Tag: 130767
  - 7
    - Add/Remove Self As Member Permission Hello There... I have a globle group name "My Enterprise Admin" who is a member of Domain Admin in AD. I created another group name "Admin Manger Enterprise". I added Admin Manage Entrprise in a security tab of "My Enterprise Admin" Group and assigb Add/Remove self as a member permission. After an hour this group is removed from the permission. And I found following in event log: Event Type: Success Audit Event Source: Security Event Category: Account Management Event ID: 641 Date: 6/16/2008 Time: 1:26:35 PM User: NT AUTHORITY\ANONYMOUS LOGON Computer: VBURDWDEVDC02 Description: Security Enabled Global Group Changed: Target Account Name: Admin Manger Enterprise Target Domain: POWER Target Account ID: POWER\Domain Admins Caller User Name: DC0001$ Caller Domain: POWER Caller Logon ID: (0x0,0x3E7) Privileges: - Changed Attributes: Sam Account Name: - Sid History: - For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. I tried again and same issue... With investigation, I found that I am not able to assign any group "add/remove self as a member" permission to a group which is a member of Domain Admin or Enterprise Admin. Can anyone help me for find solution for this. Regards, Avi Tag: Migrating Contacts from one domain to another? Tag: 130762
  - 8
    - Active directory problem!! Single windows 2003 active directory domain, two domain controllers. One domain controller hosts network attached storage (NAS)and the other hosts exchange 2007 . One of the disks of NAS has been damaged and the domain controller had to be taken off the network. When this domain controller is turned off, despite the presence of other domain controller, active directory cannot be found. I have transferred RID,operations master, PDC, infrastructure and schema roles to the one with the exchange 2007, but still cannot see the active directory when the first one is turned off. It also has the active directory integrated DNS installed and configured. Can anyone help me with this one? Tag: Migrating Contacts from one domain to another? Tag: 130752
  - 9
    - Active Directory woes... please help! Well, I have just restored my PDC and BDC from North Ghost disk backup made late last year (so more than 6 months ago). Now, the DCs won't replicate. repadmin /options [PDC_Host_Name] Current DC Options: IS_GC repadmin /options [BDC_Host_Name] Current DC Options: IS_GC DISABLE_INBOUND_REPL DISABLE_OUTBOUND_REPL When I run repadmin /options [BDC_Host_Name] -DISABLE_OUTBOUND_REP -DISABLE_INBOUND_REPL, replication fails and the BDC goes back to bein IS_GC DISABLE_INBOUND_REPL DISABLE_OUTBOUND_REPL. I tried removing the BDC, but that fails because the DCs canno replicate. Talk about an impass! What can I do to fix this? Thanks -- spectde ----------------------------------------------------------------------- spectdev's Profile: http://forums.techarena.in/member.php?userid=5165 View this thread: http://forums.techarena.in/showthread.php?t=98661 http://forums.techarena.i Tag: Migrating Contacts from one domain to another? Tag: 130749
  - 10
    - WAN to WAN I currently have an active directory at my W2k3 LAN. I need to setup a 2nd LAN, that all of my users will have access to with their current accounts. I want to keep the active directories syncronized at all times, but these LANs are seperated by a few hundred miles. I suppose I can export the directory to set the initial seed, but what best practice techniques are available to keep the directories in sync? Is there an automated method to this? Will the data on the wire be encrypted? Thanks in advance. Tag: Migrating Contacts from one domain to another? Tag: 130747
  - 11
    - Changing IP Subnet? I've had problems over the past 6 years that were caused by the original "consultants" who set up the primary subnet to be 192.168.1.nnn. An obvious problem is connecting to a users personal computer (on a router) to our network using a VPN. We have to get the user's router reconfigured to a different subnet since most default to the same one. I'm curious as to what it would take to change our internal IP subnet. to something different. Any thoughts as to what would be impacted would be appreciated. I'm not likely to do it, but it might help explain why we don't do it.... -- Regards, Hank Arnold Microsoft MVP Windows Server - Directory Services Tag: Migrating Contacts from one domain to another? Tag: 130743
  - 12
    - Moving a DC I have three functioning DCs in our domain. We have 2 locations (Hyde Park & Kingston). Each has its own subnet (HP = 192.168.1.nnn & Kingston = 192.168.100.nnn). The sites are connected via a point to point T1. Each site has a router. The DC I want to move (HOSPICEDC3)currently has an IP address of 192.168.1.113. I want to move it to the KGN subnet, changing the IP to 192.168.100.113. I have a site defined as "Kingston" on the domain (currently W2K) waiting for a DC. Everything is currently in the default (HP) site. I'm interested in a step by step procedure for moving this server. A link would be great. I have a pretty good idea what to do, but I'm anal about understanding what needs to be done before I take step one. Also, what (if anything) do I need to do to make HOSPICEDC3 the preferred DC for users in Kingston? As usual, TIA..... -- Regards, Hank Arnold Microsoft MVP Windows Server - Directory Services Tag: Migrating Contacts from one domain to another? Tag: 130742
  - 13
    - Best practice for disabling accounts after user left? (But returning) Hi, What is the best practice for: When a user works at the company for 1 year or more. They then leave for a year. (Possible reasons include maternity leave, uni study for one year, etc etc). They will then return as full time staff again. What is best practice to do with their accounts? Set to disabled for the year? Leave share permissions. Set to disabled for a few months then delete account and all share permissions. Delete account straight away. How does this work with the mailbox? Does setting the account to disabled stop them from receving all the e-mails? (Exchange 2003 here). Obviously a year's worth of e-mails would be quite a lot and would not be needed. Do you therefore stop this somehow? Look forward to hearing what you do, Thanks Tag: Migrating Contacts from one domain to another? Tag: 130737
  - 14
    - ALL LATEST DOWNLOAD AND UPDATE OF WINDOWS VISTA....... FREE DOWNLOADS FOR VISTA SUPPORTING SOFTWARES ONLY ON http://polticsinfs.blogspot.com/ Tag: Migrating Contacts from one domain to another? Tag: 130736
  - 15
    - How to upgrade windows 2000 domain controller to windows 2008? We are running a simple domain controller on windows 2000 and have a second server that is windows 2000 (backup domain controller) that also runs our exchange server (very old version, 5.5). For us, this is a "once in five year" upgrade. We only do it because all of this technology is becoming end of life. I have been instructed to upgrade our domain controllers to windows 2008 and install the latest exchange server and upgrade that. So first things first, what I want to know is, what is the best path for this? We have about 100 exchange users (so 100 users in active directory). Do I: 1. upgrade the domain controllers to windows 2008, have the exchange server (running 5.5 and windows 2000) use this upgraded domain OR 2. install a fresh domain and fresh exchange server and manually add all the users OR 3. is there a middle ground somewhere here? my concerns: If I upgrade to a 2008 domain and I make a mistake and can not attach the windows2000/exchange5.5 server to the new domain, then I am in big trouble because our mail servers will then be dead. has the domain controller technology evolved that this can be an issue or will the windows2000 server work just fine if i upgrade the domain? What are the steps, i have googled for detailed instructions and can not find any. Does someone have detailed instructions on how I will do this? what happens to the servers that are pointing to the Windows 2000 DC, do they just continue to run and point to the new DC or do they need to be rebooted or reconfigured? We still have a lot of windows 2000 servers that are destined to be upgraded as well. Thanks Tag: Migrating Contacts from one domain to another? Tag: 130731
  - 16
    - I think I need URGENT HELP on trusting domains Scenario is: Local Win2k3 domain and WAN domain in different forest .Trusted I made a mistake instead of migrating I created users and machines from scratch on the WAN domain(Users should anyway be different from the local domain) I removed each machine from the local domain and joined to the wan domain. I can logon to the WAN domain and I may even use shared resources from local but when I logon I don't see the local domain as possibility as was at the beginning of the trust. What may happen (if the WAN link go down i.e ) TIA Tag: Migrating Contacts from one domain to another? Tag: 130724
  - 17
    - Hiding the domain name from new company We are due to merge with a another company, and due to us having a more complex AD structure we are bringing the new domain into our AD. We want to try and hide our domain.com from the end users of the new company and ours and show a newdom.com (its a bit sensitive as the CEO does not want the users to feel that they now all belong to old domain.com). I have created a new Domain suffix newdom.com so new and migrated users have this account, but on its own this is not enough. is there a way to alias the domain, i did hear about a dname in DNS, but cannot find an real info or if it will hide or alias my existing domain. There are other complications in the form of an extensive DFS namespace but i will post that in the relevant group, but i need something that will also alias the DFS. regards Phil Tag: Migrating Contacts from one domain to another? Tag: 130721
  - 18
    - effect of domain upgrade to certificate authority and RRAS one of our domains is due to be upgraded to w2k3: - the domain has two DCs both running windows 2000 SP4; - one member server(windows 2000 SP4) running RRAS and certificate authority, also used as VPN server. question - can this member server continue to operate as RRAS if a third w2k3 DC is added during the upgrade or should RRAS and certificate authority be upgraded as well to w2k3? Thanks in advance for your help Tag: Migrating Contacts from one domain to another? Tag: 130719
  - 19
    - Reporting Heirarchy I am trying to reproduce functionality that is available on our company's intranet web site: To traverse the reporting heirarchy. On our web site, a "manager" manages a single group at every level of the tree. (i.e.. each person has opne and only 1 manager. each mgr manages exactly one dept.). Has anyone seen .NET code for displaying the *reporting* heirachy using a treeview display? Perhaps the 1:1 rule above is not standard and thisis the reason I can't find code to do this. Usually codeproject.com has everything Anyone see anything like this? Tag: Migrating Contacts from one domain to another? Tag: 130715
  - 20
    - Key Management Servers Is it recommended to install Key Management Server [KMS] for activating Vista & Server 2008 on domain controllers? Typically, it's best to avoid piggy-backing any services on domain controllers, so I was just curious. Any help is appreciated. Tim Tag: Migrating Contacts from one domain to another? Tag: 130709
  - 21
    - domain controller can not be recognized as domain controller Hi all, The domain controller of root domain has been crashed. I do not know how long it has been down. Finally, I rebooted the server and came online. I tried to add the second domain controller but can not. then I tried to join the PC to this domain and can not which no domain controller found. I got these events in the direcory services: event id 1645 with source NTDS replication, event id 1126 with source global catalog,....I run dcdiag and fsmo failed check. Is there a way I can make this domain controller recognized by this domain without wiping out everything? (windows 2003 R2 SP2) Tag: Migrating Contacts from one domain to another? Tag: 130707
  - 22
    - Migrate ADAM instance to new domain and don't lose info I have an issue that seems a little tricky. We are having to migrate our severs to a new domain- and for this we are using NetIQ DMA tool with works great, However we also use Passlogix SSO application which stores users credentials in an ADAM instance. We are trying to make this migration appear invisible to the desktop user, and for this happen, the old adam instance would have to have all its DACLS update to allow access for the user id in the new domain (user id's are not changing only domain membership) and we think we need to get update the ADAM schema of that instance to remove the old domain and insert the new one. Is this even realisticaly possible? or just wishfull thinking? Thanks Patrick -- dragon3085 ------------------------------------------------------------------------ dragon3085's Profile: http://forums.techarena.in/member.php?userid=51476 View this thread: http://forums.techarena.in/showthread.php?t=985837 http://forums.techarena.in Tag: Migrating Contacts from one domain to another? Tag: 130700
  - 23
    - machine authentications vs user authentication - NEWBIE Hello, sorry if my English is bad spelled. I am learning all about Windows server 2003. I am new to this but I am OK at networking. I have set up a small network of 1 server 2003 (running AD, DNS and DHCP on the same box). I also have two XP clients. Everything seems to work OK but I am wondering why...?? I thought I would have to authenticate the XP machines first of all. However, I have found that I do not need to. When one of the clients tries to join the domain, I can type in any name as the system name and when the login box pops up, as long as I enter admin credentials the machine is welcomed to the network. Why? Why donlt I have to set up the machine under the active directory "computers" first? i.e why is not the machine itself authentiacted? I then log in as a user. This is all ok. However, when I first log in as the user, would the machine have been authentiacted first at boot up time? Or is this where dot1x comes in? Any user can log in from any machine right? Can this be ties down? So that user dave can only log in from machine A but nit machine B? I am a bit confused... Any wlakthough docs on this guys? Thanks, Steve Tag: Migrating Contacts from one domain to another? Tag: 130699
  - 24
    - Defragmenting Client PCs Windows 2003 server We want to set up disk defragmentation of our client machines from active directory for Windows 2003 server. Does microsoft have an add in to do this? I don't want to spend the money for diskeeper if Microsoft already had an adm or other way of doing this. Thanks. -- Valerie Tag: Migrating Contacts from one domain to another? Tag: 130698
  - 25
    - SYSVOL not replicating Hi there, I have a problem with my domain controllers. I have two, dep-s-dc(Win 2k3 Ent) and dep-s-004(Win 2k8 Ent) dep-s-dc was our main server when the company started out and as such hosted nearly everything, DNS, DHCP, Exchange, AD and DC Over time we have got bigger and bought more servers. I installed dep-s-004 as a domain secondary controller. recently we have had problems with dep-s-dc and it was looking bad so I moved the FSMO roles to dep-s-004 making this the primary. All roles were transfered without problems. I have now noticed however that new client when logging on take an age to populate the domain list. Also group policy has stopped working. When you click on a policy you get the following message "The network name cannot be found". You get this message on dep-s-dc and dep-s-004. There are also errors relating to NTfrs in the event logs on both machines. I have done a lot of research and can't seem to pinpoint the error. Replication does seem to be working. If I create an account on dep-s-004 and check dep-s-dc it appears. ping and nslookup are ok between the two servers. It just seems to be the sysvol and netlogon that are not being replicated. they are on dep-s-dc but not on dep-s-004 How can I solve this? Tag: Migrating Contacts from one domain to another? Tag: 130690

Hi,
We're currently migrating many users with mailboxes and groups from one
domain to another. We use this ADMT v2 tool for this.
We also have a lot of contacts for some reason. Is there an easy way to
transfer these? Can't see the obvious way?

Thanks,

Top

RE: Migrating Contacts from one domain to another? by jwd

jwd
Wed Jun 18 05:20:05 PDT 2008

One way would be to use csvde to export the Contacts from your old domain
into a csv file. Then use csvde in the new domain to import all the contacts
from this file.

Google csvde and there are plenty of sites showing how to do this.

Best Regards
Joe Dunn MCSE

"David Naffy" wrote:

> Hi,
> We're currently migrating many users with mailboxes and groups from one
> domain to another. We use this ADMT v2 tool for this.
> We also have a lot of contacts for some reason. Is there an easy way to
> transfer these? Can't see the obvious way?
>
> Thanks,
>
>
>
>

Top

Re: Migrating Contacts from one domain to another? by Jorge

Jorge
Wed Jun 18 12:55:52 PDT 2008

export/import using ADFIND and ADMOD for example

exporting contacts
adfind -b "<DN of some OU>" -f
"(&(objectCategory=person)(objectClass=contact))" displayname givenName
initials sn mail objectclass XXX -csv > CONTACTS.csv

replace XXX with ANY additional attribute that needs to be exported, remove
any of the attributes I specified if need or just remove the XXX

CHANGE THE distinguishedName to match the new domain and new location if
required

importing contacts
admod -csv -add -import < CONTACTS.csv

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Identity & Access - Directory Services #

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test ANY suggestion in a test environment before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"David Naffy" <David Naffy@nospam.com> wrote in message
news:OuKmErT0IHA.3756@TK2MSFTNGP04.phx.gbl...
> Hi,
> We're currently migrating many users with mailboxes and groups from one
> domain to another. We use this ADMT v2 tool for this.
> We also have a lot of contacts for some reason. Is there an easy way to
> transfer these? Can't see the obvious way?
>
> Thanks,
>
>
>

Top