Migrating SQL server from NT4 Domain to Windows 2003 Active Directory

17 Mar 2006 10:47 AM

raghava

I was testing migration of user & computer accounts to Windows 2003 AD using
ADMT 2.

Source Domain: 1 NT PDC
1 Member Server running SQL 2000(most of the users using
Windows authentication to access the databases)

target domain: 1 DC in active directory

I wanted to find out what would be the implications after migrating users
and also the SQL server to the new Active Directory. As i am migrating user
accounts along with SID , i hope there should not be any issues.

But wanted to check if i need to do something before i remove the trust
between source and target domains and decommissions my old NT 4 source
domain and still not loose access for my migrating user accounts.

17 Mar 2006 11:40 AM

John Bell

Hi

If you are migrating SIDs you should be ok, but if you are changing domains
then migrate the logins http://support.microsoft.com/kb/246133/. If you use
Windows Groups to batch the logins it may be easier to do this manually.
Using windows groups will also move the responsibility of granting access to
the Domain Admins rather than the DBA and can be incorporated in any bring
on/change processes you have in place.

Just in case look at how to check orphaned users at
http://support.microsoft.com/kb/314546#XSLTH3177121121120121120120

If you are renaming the server check out
http://support.microsoft.com/kb/303774

John

Show quoteHide quote

"raghava" wrote:

> I was testing migration of user & computer accounts to Windows 2003 AD using
> ADMT 2.
>
> Source Domain: 1 NT PDC
> 1 Member Server running SQL 2000(most of the users using
> Windows authentication to access the databases)
>
> target domain: 1 DC in active directory
>
> I wanted to find out what would be the implications after migrating users
> and also the SQL server to the new Active Directory. As i am migrating user
> accounts along with SID , i hope there should not be any issues.
>
> But wanted to check if i need to do something before i remove the trust
> between source and target domains and decommissions my old NT 4 source
> domain and still not loose access for my migrating user accounts.
>