<MBS> Or you could do it in PowerShell... </MBS> DAMIEN SOLODOW Systems Engineer 317.447.6033 (office) 317.447.6014 (fax) HARRISON COLLEGE
From: David Lum [mailto:david....@nwea.org] Sent: Monday, November 05, 2012 12:20 PM To: NT System Admin Issues Subject: RE: New job: AD is a mess Learn ADFIND and OLDCOMP.exe for AD cleanup. Also LDIFDE and CSVDE if you need to make bulk changes (like changing UPN from @ABD to ABCDomain.com and the like) From: Tom Miller [mailto:tmil...@sfgtrust.com] Sent: Monday, November 05, 2012 8:21 AM To: NT System Admin Issues Subject: New job: AD is a mess Hi Folks, I started a new job a week ago and I'm auditing the various systems for which I am responsible. Active Directory is a mess. It is still at Windows 2000 functional level. I need to address this before a planned migration to Exchange 2010. There are a few Windows 2000 domain controllers that I need to decommission, and my memory is foggy on Windows 2000. The name for the AD domain is like ABCdomain.com. The pre- Windows 2000 name is just "ABC". Oddly, a number of systems seem to want to use ABC and not ABCdomain - these are 2003 servers and PCs mostly. Are there any tools anyone knows of that can tell me which systems refer to that. Since I'm new and the previous person left no documentation, I'm hunting alot now. All of the user IDs have the ABD domain name listed in the Account tab of their accounts, and the field is user logon name (Pre-Windows 2000). Here's the plan to at least remove the 2000 domain controllers (there are 2003/2008 DCs): 1. create new GPOs to address printer and drive mappings. Currently done via mix of batch and kixtart files. 2. Update the account information for users accounts from ABC to ABCdomain (necessary?? ). 3. Demote Windows 2000 domain controllers. 4. Change domain/functional levels to 2003 (minimum required for Exchange 2010). I'm sure I'm missing something. Comments/recommendations appreciated. Tom ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com<mailto:listmana...@lyris.sunbeltsoftware.com> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin