Koozali.org: home of the SME Server

Replacing Windows 2003 Domain Controller with SME

Offline trystnw

  • *
  • 22
  • +0/-0
Replacing Windows 2003 Domain Controller with SME
« on: February 27, 2008, 01:41:26 PM »
Hi

I am looking at replacing an existing Windows 2003 PDC with SME Server. Is there any way in which i can do this without having to backup all the XP PC's and readding the PC's to the new Domain and then restoring all the files ?

Thanks

Offline mmccarn

  • *
  • 2,626
  • +10/-0
Re: Replacing Windows 2003 Domain Controller with SME
« Reply #1 on: February 28, 2008, 03:28:47 PM »
The Microsoft "Active Directory Migration Tool" is supposed to do all of this automatically -- but always looks like it will take 30 - 40 hours of effort to setup, debug, and test prior to hitting the "go" button...

I move PC's from one domain to another as follows:
- Setup identical usernames on the new domain controller
- Add the computer to the new domain
- Login to the new domain NOT as the user who uses this computer (but with local administrative rights on the workstation).  It is important to NOT login as the intended user until after the following step, or you will create a new profile directory named for the new domain, and you'll have to use the "variation" listed below.  Sometimes (if the old profile included auto-start programs that don't close on logout), you may need to reboot the computer, making sure that the *first* login after reboot is to a user account that is NOT the intended user for the computer in order to be able to rename the intended user's profile.
- Rename the user's profile c:\documents and settings\username ==> c:\documents and settings\username.old
- logout
- login as the intended user (re-creating "c:\documents and settings\username")
- logout
- login as another user with local admin rights (the same user used above, for example)
- rename the new userprofile c:\documents and settings\username ==> c:\documents and settings\username.new
- rename the old user profile c:\documents and settings\username.old ==> c:\documents and settings\username
- Change the ownership of the old profile to be the new user (or give the new user local administrative rights on the workstation)
- logout
- login as the new user - s/he should now have the exact same environment s/he had on the Windows server.

Variation - can't use the old username, or old profile name is incorrect, or you've already created a new profile name for the intended user
If the old profile name is "username.domainname", or if you're trying to change the username but keep the settings from the old system:
- download and install the Windows 2003 Resource Kit
- follow the above procedure, ending up with the old profile named correctly for the new login credentials
- use "linkd.exe" (from the W2k3 resource kit) to create a "link" to the new profile with the exact name of the old profile, in case any of the registry settings include a hard-coded path to the old profile directory name. (note: you don't need to install the entire resource kit on each workstation, you only need to put "linkd.exe" somewhere where you can get to it from each system - either in c:\windows on each system, or in a network share, for example)


Offline trystnw

  • *
  • 22
  • +0/-0
Re: Replacing Windows 2003 Domain Controller with SME
« Reply #2 on: February 28, 2008, 06:47:33 PM »
Thanks a lot

You've saved me a whole lot of work


Offline uniqsys

  • *
  • 133
  • +0/-0
Re: Replacing Windows 2003 Domain Controller with SME
« Reply #3 on: February 28, 2008, 09:56:55 PM »
mmccarn,

Your solution sounds like it would be a very helpful HOW TO for a lot of people.  Could we use your post here as a starter?
...

Offline Jáder

  • *
  • 1,099
  • +0/-0
    • LinuxFacil
Re: Replacing Windows 2003 Domain Controller with SME
« Reply #4 on: February 28, 2008, 10:26:31 PM »
I just updated http://wiki.contribs.org/Windows_Integration with info of this thread.
Let´s use that Wiki! :)
...