#99547 - 2003-03-14 12:27 AM
Domain Migration
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
We are in the midst of a domain migration. Call the old Domain X and the new Domain Y.
These are for user accounts..
I am able to get the list of users that are in group using an LDAP Query and push this out to a list.. The only issue is that new users that have been created are already in the new domain.. If I look in AD we see the users that are in both X and Y. When I run the LDAP Query, can we exclude the user accounts that are already in the Y Domain?
Thanks,
Kent
|
Top
|
|
|
|
#99548 - 2003-03-14 02:50 AM
Re: Domain Migration
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
Kent, not sure what up here. Can you be more specific in what you are trying to accomplish.
Are you duplicating groups, applying the groups to resource domains, etc.
|
Top
|
|
|
|
#99549 - 2003-03-14 03:02 AM
Re: Domain Migration
|
Radimus
Moderator
Registered: 2000-01-06
Posts: 5187
Loc: Tampa, FL
|
he wants to create a query/routine that will build a list of domain1\users that are not domain2\users.
|
Top
|
|
|
|
#99550 - 2003-03-14 03:06 AM
Re: Domain Migration
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
One of the easiest approaches to get to that conclusion is to use my GrpMaint.exe to enumerate the groups on each domain and feed the output files into Access. You then can perform a "Not IN" query among others to determine what actions you want to take next.
|
Top
|
|
|
|
#99551 - 2003-03-14 01:51 PM
Re: Domain Migration
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Howard,
I will dig into this today.. I appreciate the response on this.
Thanks,
Kent
|
Top
|
|
|
|
#99552 - 2003-03-14 05:01 PM
Re: Domain Migration
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Howard,
Does the Groupmaint.exe support "Universal" Groups? From what I could find it supports Local and Global..
Kent
|
Top
|
|
|
|
#99553 - 2003-03-14 05:35 PM
Re: Domain Migration
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
I think not. Don't have any Universal Groups to test.
Writing the author of the Perl module that is used in the code now.
|
Top
|
|
|
|
#99554 - 2003-03-14 07:31 PM
Re: Domain Migration
|
Howard Bullock
KiX Supporter
Registered: 2000-09-15
Posts: 5809
Loc: Harrisburg, PA USA
|
If you enumerate local groups with this program let me know if universal group get listed as members of the local group.
|
Top
|
|
|
|
#99555 - 2003-03-16 09:05 PM
Re: Domain Migration
|
Kdyer
KiX Supporter
Registered: 2001-01-03
Posts: 6241
Loc: Tigard, OR
|
Howard,
The GRPMAINT.EXE program does not appear to "hit" the Catalog and only queries the SAM Database on the respective server.. If we could get to that, we could see the Universal Groups.. The problem being is that we need to "see" the group from either domain. That is why I started with an LDAP query.
Kent
|
Top
|
|
|
|
Moderator: Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart
|
0 registered
and 507 anonymous users online.
|
|
|