Announcement

Collapse
No announcement yet.

Computer account is not disabled in source domain using ADMT3.0

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Computer account is not disabled in source domain using ADMT3.0

    I'm performing intraforest migration, Here is the scenario,

    Source Domain: Windows 2000 Server / Sp4/ Native Mode
    Target Domain: Windows 2000 Server / Sp4/ Native Mode
    Migration tool: ADMT 3.0 on Windows server 2003 R2
    Privilege : Source Domain: Domain Admin rights and Target Domain: Built in administrator



    When I'm perfoming a computer object migration, after the computer account is migrated to target domain, the computer account in the source domain is not disabled. As per ADMT 3.0 guide it say it must disable.

    Here is the migration log file,

    [Settings Section]
    Task: Computer Migration (86)
    ADMT Console
    User: SWS\admtmig
    Computer: pswsk3s072.abc.com (PSWSK3S072)
    Domain: abc.com (SWS)
    OS: Microsoft Windows Server 2003 5.2 (3790) Service Pack 1
    Source Domain
    Name: swresource.int.abc.co.uk (SWRESOURCE)
    DC: flrswr2kd01.swresource.int.abc.co.uk (FLRSWR2KD01)
    OS: Windows 2000 Server 5.0 (2195) Service Pack 4
    OU:
    Target Domain
    Name: abc.com (SWS)
    DC: flrsws2kd03.abc.com (FLRSWS2KD03)
    OS: Windows 2000 Server 5.0 (2195) Service Pack 4
    OU:
    LDAP://abc.com/OU=Test_mig,OU=Test-Site,DC=sws,DC=int,DC=abc,DC=co,DC=uk
    Intra-Forest: Yes
    Translate Files: No
    Translate Local Groups: No
    Translate Printers: No
    Translate Registry: No
    Translate Rights: No
    Translate Shares: No
    Translate User Profiles: No
    Conflict Option: Ignore
    Perform Pre-check Only: No

    [Object Migration Section]
    2009-01-13 17:06:19 Starting Account Replicator.
    2009-01-13 17:06:20 CN=MIGRATION-SWRPC - Created
    2009-01-13 17:06:21 - Set password for CN=MIGRATION-SWRPC.
    2009-01-13 17:06:21 Operation completed.

    [Agent Dispatch Section]
    2009-01-13 17:08:52 Installing agent on 1 servers

    2009-01-13 17:08:52 The Active Directory Migration Tool Agent will be
    installed on migration-swrpc.swresource.int.abc.co.uk
    2009-01-13 17:10:43 Started job: migration-swrpc.swresource.int.abc.co.uk
    000086_MIGRATION-SWRPC {5B183C43-729B-445C-910C-331A09A696BA}
    2009-01-13 17:15:39 Done waiting for the computer
    'migration-swrpc.swresource.int.abc.co.uk' to reboot.
    2009-01-13 17:15:40 Post-check passed on the computer
    'migration-swrpc.swresource.int.abc.co.uk'. The new computer name is
    'migration-swrpc.abc.com'.




    If any one has any work around please let me know. Many Thanks

  • #2
    Re: Computer account is not disabled in source domain using ADMT3.0

    Hi,
    I'm not sure it suppose to be disabled. Where did you see that in the documentation?
    When migrating user object you can choose to disable the source accounts, but not on the Comptuer Migration Wizard
    However, you can leave the computer accounts enabled for a while and after you finish with the migration disable it.

    Comment


    • #3
      Re: Computer account is not disabled in source domain using ADMT3.0

      Sorry Smart-X,

      I have few application which require the source computer account to get disable after migration....

      Comment


      • #4
        Re: Computer account is not disabled in source domain using ADMT3.0

        As far as I know, ADMT Computer Migration Wizard does not have the possibility to disable the account on the source domain after the migration.

        However, I have an idea that might be helpful in your situation.
        You can write a little script that compares computer accounts from the source and target domains and every time it finds a match, it disables the account on the source domain.

        Then, you can write it as scheduled task every hour or so.

        This way you won't have to interpreter the logs and see which computer accounts are migrated successfully and the disabled them.

        What do you think?
        It should be a pretty simple script.

        Post back if you need help writing it.

        Comment


        • #5
          Re: Computer account is not disabled in source domain using ADMT3.0

          Originally posted by Smart-X View Post
          As far as I know, ADMT Computer Migration Wizard does not have the possibility to disable the account on the source domain after the migration.

          However, I have an idea that might be helpful in your situation.
          You can write a little script that compares computer accounts from the source and target domains and every time it finds a match, it disables the account on the source domain.

          Then, you can write it as scheduled task every hour or so.

          This way you won't have to interpreter the logs and see which computer accounts are migrated successfully and the disabled them.

          What do you think?
          It should be a pretty simple script.

          Post back if you need help writing it.
          Please note computer account in the source domain gets disabled after migration. This is the natural behaviour of ADMT 3.0. Pls refer the MS article for your reference - http://technet.microsoft.com/en-us/l.../cc974402.aspx

          Comment


          • #6
            Re: Computer account is not disabled in source domain using ADMT3.0

            Thank you for pointing that to me. I wasn't aware of that...

            I was surprised to see that note by MS, because I did several migrations, and I always had to disable the old machine accounts by myself...

            Just to make sure, I recreated your scenario in my lab and I got the same results! - All logs are clear of errors, but computer accounts in the source domain are not disabled...

            Searching for that in Google, I found nothing besides your post...

            However, I have an old tool I wrote exactly for that purpose.

            I'll find it, give it a little shape and post back with a link to it.

            Comment


            • #7
              Re: Computer account is not disabled in source domain using ADMT3.0

              This is the link to the tool:
              http://www.smart-x.com/?CategoryID=171&ArticleID=159

              It's free.

              Post back and tell me if it helped.

              Comment

              Working...
              X