• State Suggested Answer
  • Locked Locked
  • Replies 12 replies
  • Answers 1 answer
  • Subscribers 20 subscribers
  • Views 9983 views
  • Users 0 members are here
Options
Related
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Not sure how to approach this migration scenario (5 Forests > 1) Domain E is not clear to me

questmigrator
over 6 years ago

Hello All,

Source Domains a mix of 2003 & 2008R2 > Target 2012 R2

Migrate Domains A-E > Domain F
Everyone trusts each other (SidHistory enabled)

The following is just one example of the way groups have been setup and nested
(User and resource Forest)
Source Domain A
GG-DomainA (Global security Group)

(User and resource Forest)
Source Domain B
GG-DomainB (Global security Group)

(User and resource Forest)
Source Domain C
GG-DomainC (Global security Group)

(User and resource Forest)
Source Domain D
GG-DomainD (Global security Group)

(Resource Forest for above forests)
Source Domain E
DL-DomainE (Domain Local Security Group) With all GG-Domain (A-D) nested within.  This is just one of a number of groups that are DLs in this forest that were created to give access to data.  100's of DLs with nested groups from the other Domains (GG-DomainA-D).  In turn these DLs (DL-DomainE) have been assigned permissions on the Data that resides in this Forest.


Target Forest F
Migrate Forests A-E here.

Which is the best way to tackle (migrate) such a scenario?

Please assist,
Jeffrey

Parents
  • 0 over 6 years ago
    ADPW only runs against one domain at a time. You can limit it down to run against a single OU in that domain as well. You only need to process the Group Membership in each of the trusting domains to update the group membership from the source domains.
Reply
  • 0 over 6 years ago
    ADPW only runs against one domain at a time. You can limit it down to run against a single OU in that domain as well. You only need to process the Group Membership in each of the trusting domains to update the group membership from the source domains.
Children
No Data