Listed below are the requirements for the objects to be migrated, the computer on which to install Active Directory Migration Tool, and any computer to which an Active Directory Migration Tool agent will be dispatched.
Source objects
Objects to be migrated must meet the following criteria:
- Source objects must be of one of the following types:
- User account.
- Security-enabled group including: local group (for Windows NT, only a domain controller's shared local groups can be migrated); domain local group (available in Windows 2000 and Windows Server 2003 domains operating in ); global group.
- Computer account.
- Source objects cannot be a built-in account (such as local Administrators, Users, and Power Users). Built-in account Security IDs (SIDs) are identical in every domain, so adding them to a SID History violates the SID-uniqueness requirement of the forest.
- The SIDs of the source objects must not already exist in the target , either as primary account SIDs or in the SID History of an account.
Active Directory Migration Tool
ADMT must have connectivity to the RID Pool Master. Installing ADMT on the RID Pool Master will save on network traffic.
Active Directory Migration Tool can be run from any computer and can be run using Terminal Server.
Make sure that the computer on which Active Directory Migration Tool is installed meets the following requirements:
- Pentium II or later central processing unit (CPU).
- Enough memory to accommodate the migration process. The minimum amount of available RAM is 10 megabytes (MB), plus 4 kilobytes for each user to be migrated.
- A hard disk partition with at least 35 MB of free space, which includes 7 MB for Active Directory Migration Tool installation and 25 MB for data and log files.
The Exchange migration requires a user account which has Exchange Administrator privileges. The Exchange Migration Wizard within the Active Directory Migration Tool will prompt you for these credentials.
Active Directory Migration Tool agent
The Active Directory Migration Tool agent can operate on computers running the following operating systems:
- Windows NT 3.51 with Service Pack 5 (both x86-based and Alpha-based computers)
- Windows NT 4.0 with Service Pack 4 or later (both x86-based and Alpha-based computers)
- Windows 2000
- Windows XP
- Windows Server 2003 family
Computers on which the Active Directory Migration Tool agent will operate must meet the following requirements:
- A hard disk partition with at least 15 MB of free disk space for the agent and agent log files.
- The ADMIN$ share must exist on computers running Windows 3.51 for the agent to install successfully.
- Active Directory Migration Tool user must be logged on with a user account that has Administrator or equivalent permissions on the target computer. Note that the built-in Administrators group normally contains the Domain Administrators group from the computer's domain.
- Remote registry access must be enabled. For information on how to enable or disable remote registry access, see the Microsoft Web site(http://www.microsoft.com/).
- NetBIOS should be enabled.
- The (NetBIOS) Server service should be running.
- The target computer must be a valid member of a valid domain. Note that some computers might have expired passwords, for example, the computer might have been disconnected from the domain for some time and its computer password has expired.
