Re-read what that helpfile entry says: > However, the wizard does not remove the user from groups in the > target domain that no longer exist in the source domain.
That implies that it will update the account in the target domain with group membership from the source domain, but it will not remove any group membership from the target account even if the source account is not a member of those groups. This is a good thing, especially in your case since you want to add the group memberships up so the final account has the aggregate of all their accounts. That said I do not believe that intraforest migrations allow you to merge accounts. Pain in the ass if that is the case for ADMT as it is for NetIQ. I have looked around but all the information I can find on ADMT doesn't mention the issue of merging accounts in an intraforest migration; perhaps they assumed that since you are in the same forest there wouldn't be conflicts ;) Can anyone else get any better docs on ADMT...or speak from experience? If that is indeed the case then your best bet is to change the groups from the domains to Universal, migrate them to the target domain and fix the group membership for the target domain users with a script. Then you don't need to migrate the conflicting accounts and can change the groups back to Global when you're done. Phil On Wed, 23 Mar 2005 14:06:44 -0500, [EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > > I have checked the help files in the ADMT and it appears that it will only > replace the account in the target domain with the account in the source > domain. As a result, the users will be removed from the groups in the > target domain and they will loose access to their applications. I want to > combine the properties of both accounts, however, there does not seem to be > an option for that, other than to do it manually. > > Replace conflicting accounts > > Changes properties of existing accounts in the target domain to match the > properties of the account with the same name in the source domain. > > Note > When using the Replace conflicting accounts option to remigrate and > update accounts, the user's group memberships in the source domain > are checked. The user is made a member of groups in the target domain > if the user is a member of those groups in the source domain. > However, the wizard does not remove the user from groups in the > target domain that no longer exist in the source domain. > > > "Mulnick, Al" > <[EMAIL PROTECTED] > T.com> To > Sent by: ActiveDir@mail.activedir.org > [EMAIL PROTECTED] cc > ail.activedir.org > Subject > RE: [ActiveDir] [Active Dir] > 03/23/2005 01:26 Handling Duplicate Accounts During > PM d omain Migration > > Please respond to > [EMAIL PROTECTED] > tivedir.org > > So merge is the correct term then? > > It's been a while, but I was thinking that ADMT could handle that. Have > you > checked the help files for merging source to target? > > al > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Wednesday, March 23, 2005 12:15 PM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] [Active Dir] Handling Duplicate Accounts During d > omain Migration > > These are the same users in the same forest, but in different domains. > > "Mulnick, Al" > <[EMAIL PROTECTED] > T.com> To > Sent by: ActiveDir@mail.activedir.org > [EMAIL PROTECTED] cc > ail.activedir.org > Subject > RE: [ActiveDir] [Active Dir] > 03/23/2005 12:06 Handling Duplicate Accounts During > PM d omain Migration > > Please respond to > [EMAIL PROTECTED] > tivedir.org > > And when you say duplicates names, are they representing different users or > the same users from different forests? > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > [EMAIL PROTECTED] > Sent: Wednesday, March 23, 2005 11:23 AM > To: ActiveDir@mail.activedir.org > Subject: Re: [ActiveDir] [Active Dir] Handling Duplicate Accounts During > domain Migration > > Yes, all of these domain are in the same forest. We have an empty root > domain, MSROOT.domain and one tree in the forest, DOMAIN.com and 3 child > domains, FM.domain.com, MI.domain.com and RA.domain.com. The forest > functional level is Windows 2000 while the domain functional level of > MSROOT.domain and DOMAIN.com is Windows 2003. I raised it from Windows 200 > Native after the upgrade. > > The accounts all follow the same naming standard across all domains. > > Phil Renouf > <[EMAIL PROTECTED] > m> To > Sent by: ActiveDir@mail.activedir.org > [EMAIL PROTECTED] cc > ail.activedir.org > Subject > Re: [ActiveDir] [Active Dir] > 03/23/2005 10:21 Handling Duplicate Accounts During > AM domain Migration > > Please respond to > [EMAIL PROTECTED] > tivedir.org > > Are they all in the same forest? You mentioned child domains so I assume > they are, but I just wanted to check. Do the accounts follow the same > naming > standard across all the domains? You mention the target domain is Windows > 2003 Native, I assume this means Windows 2003 in Win2k Native mode? > > Phil > > On Wed, 23 Mar 2005 10:00:06 -0500, [EMAIL PROTECTED] > <[EMAIL PROTECTED]> wrote: > > > > > > We are currently trying to migrate all of our child domains into > > one single domain. There are 3 child domains, 2 of which are Windows > > 2000 native and 1 is Windows 2000 Mixed. The target domain is Windows > > 2003 Native. We plan to use ADMT v2 for the planned migrations. > > There were many different project teams, each with a hand in AD, > > before I arrived. When an account was needed in a particular domain it > was > > just created, even though there were obviously trusts in place. Now I > have > > 1,000's of duplicate user ID's in the target domain. How would I go > > about merging the accounts in the child domains with the accounts in > > the target domain? > > > > Thanks, > > Chris > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: > > http://www.mail-archive.com/activedir%40mail.activedir.org/ > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
