4

So - following from my previous question: How do I stop DFSR replication preventing a Domain Controller from advertising Domain Services?, I lost the FSMO DC, and my only other DC was in an unrecoverable state.

I've created a new domain to continue my testing, but now have an issue which I suspect is relevant to any domain suffering a "catastrophe".

I have user accounts and client PCs "on the old domain". (Actually 1 client PC and 3 accounts)

I can still sign into the client PC as any of those users on the "dead" domain, because that is cached.

There are (thankfully) no encrypted files in the "old" domain.

What I would now like to do is migrate the full content (files, preferences, etc) from the "dead" domain to the new "live" domain for any/all user accounts, for the "old" PC.

Is there anything out there which can assist me in doing so?

Improve this question

4 Answers 4

Reset to default
4
+50

USMT, which is part of the WinAIK

Improve this answer
3

To make this as painless as possible, you will need to restore at least one of the Domain Controllers from a backup. Hopefully you do have backups, since this is about a failed Domain Controller, which is the cornerstone of your AD infrastructure. If you can't do this, you're going to have to recreate almost everything manually on the server-side (or at least with a lot of manual interation).

Once you can prop up a DC from backup for the old domain, you will then have to use ADMT to migrate the old users/computers/servers to the new domain. This tool will transparently translate NTFS and share permissions on the old servers/workstations/user profiles to their corresponding objects in the new domain. All that you need are credentials in both domains and a server to run ADMT from.

If you can't get at least one working DC, you're going to have to manually copy and set permissions for all of your workstations and servers. The User State Migration Tool might make the local profiles less painful for you, but any server NTFS ACLs will have to be scripted or done by hand.

Improve this answer
0

Do you still have access to the old AD DCs ? I came across a tool that claim it can recover an AD from a non-bootable machine assuming your SYSVOL folder is still around: http://utools.com/UMove.asp

Waring: I haven't tried that utility at all so I do not imply anything - one way or another - about its quality.

Improve this answer
0

I'm currently going through a migration from Windows XP to Win7. We are migrating the users from one domain to another and changing their user id's. I wrote the USMT script to accomplish this as painlessly as possible. Here's the link to another post where it is and commented:

User Domain Migration

Let me know if you need any help with it. Good luck!

Improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .