|
|
Scenario:
1. DomainA: Contains all user, computer, server (except as noted in
Domain B) accounts.
2. DomainB: Containers Exchange servers & voicemail (Cicso Unity)
servers. Each user that has email (most of them) also has a disabled
account in this domain. Same username in both domains.
3. A & B are trusted.
4. Each user's DomainA account is given Read, Full, Associated
External Account rights to the DomainB Mailbox Rights.
The ADMT documentation is a little weak in this case since I'm not
doing to an NT to 2003 migration AND it not being a populated domain
to an unpopulated domain. We probably won't move the workstation
accounts, we'll just re-RIS them into DomainB. We're also
considering just enabling the user's DomainB account and not migrating
accounts either.
Probably our biggest area of concern/legwork is groups & group
membership. I can use the ADMT to migrate the groups without
members. Is there a method of saying.. "if DomainA\User is a member
of DomainA\GroupX then make DomainB\User a member of DomainB\GroupX"?
I was thinking some kind of export of each groups members from DomainA
to a delimited file. Change the occurrences of "DomainA\" in it to
"DomainB\" and then import that into the DomainB group.. Similar
steps with Share & NTFS permissions. Perhaps even something real
time that doesn't need an input/ouput file?
Anyway I look at this, it's going to be a whip!
|
|
|