You must now set up administration privileges on the Windows 2003 domain. Open the Active Directory Users and Computers snap-in on the Windows 2003 system, and expand the Builtin node (which contains the server's local groups) under IKDOM2.ORG. In the local Administrators group, add the domain administrators from the source domain (IKDOM01\Domain Admins).
The next step in preparing for the migration is to edit the registry for TCP/IP client support on the IKDOM01 PDC. Open a registry editor, go to the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa subkey, and add TcpipClientSupport as a new DWORD entry. Ensure that the new entry's value is set to 1, then restart the IKDOM01 PDC.
You're now ready to begin migrating user-account information. On the Windows 2003 PDC, open the MMC Active Directory Migration Tool snap-in. When the tool's MMC console is displayed, it looks fairly sparse. There's an Active Directory Migration Tool node, a placeholder node for reports, and little else on the screen. ADMT is a wizard-powered tool; you use one of 11 wizards to initiate every action that ADMT performs. Right-click the Active Directory Migration Tool node to see the list of available wizards, as Figure 1 shows. The wizards are as follows:
- User Account Migration Wizard
- Group Account Migration Wizard
- Computer Migration Wizard
- Security Translation Wizard
- Reporting Wizard
- Service Account Migration Wizard
- Exchange Directory Migration Wizard
- Undo Last Migration Wizard
- Retry Task Wizard
- Trust Migration Wizard
- Group Mapping and Merging Wizard
Some of the wizards, such as the Trust Migration Wizard, let you select the source domain, then display one screen that acts like a dialog box. Other wizards, such as the User Account Migration Wizard, are more involved, but all use the same basic process.