Kdyer
(KiX Supporter)
2003-03-14 12:27 AM
Domain Migration

We are in the midst of a domain migration. Call the old Domain X and the new Domain Y.

These are for user accounts..

I am able to get the list of users that are in group using an LDAP Query and push this out to a list.. The only issue is that new users that have been created are already in the new domain.. If I look in AD we see the users that are in both X and Y. When I run the LDAP Query, can we exclude the user accounts that are already in the Y Domain?

Thanks,

Kent


Howard Bullock
(KiX Supporter)
2003-03-14 02:50 AM
Re: Domain Migration

Kent, not sure what up here. Can you be more specific in what you are trying to accomplish.

Are you duplicating groups, applying the groups to resource domains, etc.


Radimus
(KiX Supporter)
2003-03-14 03:02 AM
Re: Domain Migration

he wants to create a query/routine that will build a list of domain1\users that are not domain2\users.

Howard Bullock
(KiX Supporter)
2003-03-14 03:06 AM
Re: Domain Migration

One of the easiest approaches to get to that conclusion is to use my GrpMaint.exe to enumerate the groups on each domain and feed the output files into Access. You then can perform a "Not IN" query among others to determine what actions you want to take next.

Kdyer
(KiX Supporter)
2003-03-14 01:51 PM
Re: Domain Migration

Howard,

I will dig into this today.. I appreciate the response on this.

Thanks,

Kent


Kdyer
(KiX Supporter)
2003-03-14 05:01 PM
Re: Domain Migration

Howard,

Does the Groupmaint.exe support "Universal" Groups? From what I could find it supports Local and Global..

Kent


Howard Bullock
(KiX Supporter)
2003-03-14 05:35 PM
Re: Domain Migration

I think not. Don't have any Universal Groups to test.

Writing the author of the Perl module that is used in the code now.


Howard Bullock
(KiX Supporter)
2003-03-14 07:31 PM
Re: Domain Migration

If you enumerate local groups with this program let me know if universal group get listed as members of the local group.

Kdyer
(KiX Supporter)
2003-03-16 09:05 PM
Re: Domain Migration

Howard,

The GRPMAINT.EXE program does not appear to "hit" the Catalog and only queries the SAM Database on the respective server.. If we could get to that, we could see the Universal Groups.. The problem being is that we need to "see" the group from either domain. That is why I started with an LDAP query.

Kent