Migrating from Small Business Server 4.5 or Windows NT Server 4.0 to Windows Small Business Server 2003

To upgrade to the Microsoft® Windows® Small Business Server 2003 operating system from the Small Business Server 4.5 or Windows NT® Server 4.0 operating systems, you must perform a server migration. A server migration involves installing Windows Small Business Server 2003 on a new computer and then migrating data and settings. You can complete a server migration either to a computer on which you are installing a retail version of Windows Small Business Server 2003 or to a computer that has Windows Small Business Server 2003 preinstalled by an original equipment manufacturer (OEM).

 

Before You Begin

To get ready to migrate your server to Windows Small Business Server 2003, familiarize yourself with new terms and definitions and the process for completing a migration.

Terms and Definitions

The following key terms are associated with migrating to Windows Small Business Server 2003:

• Active Directory® Migration Tool (ADMT) A tool used to simplify the process of moving user, group, and computer accounts from one Active Directory® directory service domain to another or of migrating from Windows 2000 Server domains to Active Directory domains.
• Exchange Migration Wizard A tool that simplifies the process of moving mailboxes from one Exchange server to another when the mailboxes are not in the same domain.
• migration The process of either (1) upgrading to a new version of a product by installing the product on a new computer and then transferring data and settings from the computer running the previous version of the product; or, (2) migrating an existing installation of Windows Small Business Server 2003 to a new computer.
• source server The server from which you are migrating. References to source server in this document refer to your existing server running either Small Business Server 4.5 or Windows NT Server 4.0.
• destination server The server to which you are migrating. References to the destination server in this document refer to the server running Windows Small Business Server 2003.

Process for Completing a Migration

Migrating from Small Business Server 4.5 or Windows NT Server 4.0 includes the following steps:

1. Prepare for the Migration. In this step, you ensure a successful migration by completing the following tasks: collect necessary information, export public folders to a .pst file, export the Administrator account mailbox and rules, request that users delete unnecessary e-mail and files, verify that hardware drivers and existing software are supported, ensure the source server is running the latest service packs, and back up the source server. Additionally, at the end of this step, if users are still connected to the network, you notify users that they must log off of the domain.
2. Required Steps to Install Windows Small Business Server 2003 on the Destination Server. In this step, you install Windows Small Business Server 2003 by completing the following tasks: disable the DHCP Server service if it is running on the source server, connect the source and destination servers for the migration, install Windows Small Business Server 2003 by using the specified requirements, and complete the Network Tasks on the To Do List (which appears at the end of Setup). After completing the Network Tasks, you must disconnect the Internet Connection device from the Internet and then disable real-time antivirus software on both servers so that it does not interfere with the transfer of data during the migration.
3. Prepare Client Computers for the Account Migration. In this step, you prepare client computers that are running Windows NT Workstation 4.0, Windows 2000 Professional, Windows XP Professional, Windows 2000 Server, or Windows Server™ 2003, or a member server running Windows NT Server 4.0 or later. Computer accounts for client computers running these operating systems are migrated by using the Active Directory Migration Tool (ADMT) in "Step 4. Begin the Migration." ADMT does not support migrating computer accounts for client computers running Windows 95, Windows 98, or Windows Millennium Edition. You manually configure these client computers for the destination server in "Step 6. Configure Client Computers."
4. Begin the Migration. In this step, you install and configure ADMT on the destination server and then migrate user, group, and computer accounts. If Exchange Server 5.5 is running on the source server, you determine if the Exchange server mail quota for the destination server needs to be updated, and then you migrate Exchange mailboxes. Additionally, you must move shared folders and any application data to the destination server and migrate any SQL Server™ databases to the destination server.
5. Configure the Destination Server. In this step, you assign user accounts to a Windows Small Business Server 2003 template and deploy applications to the client computers so that users can properly access the Windows Small Business Server 2003 network. You must also complete additional configuration settings on the destination server, including completing the Management Tasks on the To Do List, configuring custom settings from the source server, configuring distribution lists and custom recipient policies, and configuring the Microsoft Connector for POP3 Mailboxes.
6. Configure Client Computers. In this step, you configure e-mail and proxy settings for client computers running Windows 2000 Professional or Windows XP Professional. If you have client computers running operating systems earlier than Windows 2000 Professional, you must manually configure them for the destination server, install applications, and configure e-mail and proxy settings. It is also recommended that you verify that client computers can connect to all necessary resources and files. You can also import Exchange server public folders now that a client computer is configured to connect to Exchange server on the destination server.
7. Complete the Migration. In this step, you remove permissions that were necessary for the migration, and you uninstall ADMT from the destination server. You also configure password policies so that the users are prompted for a new password the first time they log on to the destination server. After verifying that all necessary data and settings were migrated, you retire the source server.

Sample Timeline

If you plan to complete the entire migration while users are not connected to the network, follow the steps in this document in the order presented.

However, if you prefer to minimize the time that users are disconnected from the network during the work week, you can use the following sample timeline. For more information about each task in the timeline, see the instructions for that task later in this document.

 

Day	Tasks	Important Information
Day 1	Collect information. Verify that hardware drivers and existing software are supported. Request that users delete old files and old mail. Install Windows Small Business Server 2003 using specified requirements.	If you have the DHCP Server service running on the source server, ensure that you have the destination server connected to a switch or hub that is not connected to the network so that DHCP Server service is installed on the destination server during Windows Small Business Server 2003 Setup. If you are using a router device that also provides a DHCP service, ensure that it is connected to the destination server during Windows Small Business Server 2003 Setup so that DHCP is properly configured on the destination server. Because it is recommended that your servers not be connected to the Internet during the migration, you should complete this task after business hours. For more information, see Appendix C of Getting Started at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20122). You can install Windows Small Business Server 2003 at any time before beginning the migration. However, ensure that you follow the instructions in the section “Requirements for Installing the Destination Server.”
Day 2	Ensure that the source server is running specified service packs. Export public folders as well as the Administrator mailbox and Administrator rules. Back up the source server.	It is recommended that the backup be completed after business hours so that the latest data is backed up.
Day 3 and 4 (while users are not in the office)	Disable DHCP on the source server. Connect servers for the migration. Prepare client computers. On the destination server, complete the Network Tasks on the To Do List. Complete the remaining migration steps (4 through 7) in order.	The amount of time that migration will take depends on the number of user accounts, group accounts, and client computers, and the size of each user's mailbox.

Crucial Information About the Migration

You must follow the steps as outlined in this document or the migration will fail. Some key issues that can cause the migration to fail are as follows:

• The NetBIOS domain names for the source and destination servers must be different. After the migration, it is not possible to change the NetBIOS domain name of the destination server.
• The source computer name and destination computer name must be different. After the migration, it is not possible to change the computer name of the destination server. The computer name is used to configure Windows Small Business Server tools and applications. Because the destination computer name must be different from the source computer name, if a client computer refers to the source computer name (for example, with UNC paths, mapped drives, shortcuts, or printers that were moved from the source server to the destination server), the references will become invalid during the migration. To prevent this, you must update or delete the references on the client computer.
• The DHCP Server service on the source server must be disabled. At the end of the migration, because the source server is retired, the DHCP Server service must be running on the destination server, unless you have a router device that provides the service. In order for the DHCP Server service to be installed on the destination server, you must disable the DHCP Server service on the source server before connecting the destination server to the network. If you are using a router device that also provides a DHCP service, ensure that it is connected to the destination server during Windows Small Business Server 2003 Setup so that DHCP is properly configured on the destination server. Because it is recommended that your servers not be connected to the Internet during the migration, you should complete this task after business hours. For more information, see Appendix C of Getting Started at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20122).
• Use ADMT to migrate user, group, and computer accounts, and use the Exchange Migration Wizard to migrate user mailboxes. Using ADMT to migrate user, group, and computer accounts preserves the security identifiers (SIDs). For more information about ADMT, after installing the tool in "Step 4. Begin the Migration," on the destination server, browse to \Program Files\Active Directory Migration Tool, and then double-click DomainMig.chm. Using the Exchange Migration Wizard provides a simplified and more reliable method for moving user mailboxes than previous Exchange migration methods. The Exchange Migration Wizard migrates all user mailboxes. However, you must manually export mailbox rules because they are not preserved. Additionally, the wizard does not migrate the Administrator account mailbox and rules or the public folders. You must export them from the source server and then import them to the destination server. For more information about the Exchange Migration Wizard, search for article 328871, "How to: Use the Exchange Migration Wizard to Migrate Mailboxes From an Exchange Organization" at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20167).
• Custom settings on the source server must be configured manually on the destination server at the end of the migration. If you have custom settings for your Exchange server SMTP connector, DHCP scope options, DNS records, Routing and Remote Access service (RRAS), Group Policy, or Proxy Server, you need to record the settings and then manually configure them on the destination server at the end of the migration. Additionally, if you have custom Web sites configured with Internet Information Services (IIS), you must either copy the files to the destination server and then re-create the Web sites or use the IIS 6.0 Migration Tool available at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20161).
• Desktop profiles for client computers running Windows 2000 Professional or Windows XP Professional are preserved during the migration. However, any references to the computer name of the source server (for example, UNC paths, shortcuts, and mapped drives) are no longer valid at the end of the migration.
• Once you have connected the source and destination servers for the migration, do not add new user accounts, group accounts, or computer accounts to either server until "Step 5. Configure the Destination Server." If you attempt to create a user, group, or computer account before Step 5, the account creation will fail. You can add new user, group, or computer accounts to the destination server when you complete Management Tasks on the To Do List in Step 5.

Step 1. Prepare for the Migration

In this step, you ensure a successful migration by completing the following tasks: collect necessary information, export public folders to a .pst file, export the Administrator account mailbox and rules, request that users delete unnecessary e-mail and files, verify that hardware drivers and existing software are supported, ensure that the source server is running the latest service packs, and back up the source server. Additionally, at the end of this step, if users are still connected to the network, notify users that they must log off the domain.

To collect information

Migrating to Windows Small Business Server 2003 requires that you collect information about the source server and make decisions about information needed for the destination server.

1. Complete the Migration Worksheets at the end of this document. The worksheets request the following information:
   • Worksheet 1: Source and Destination Computer Information. Record information about the source server and then determine what information about the destination server you will need in order to install Windows Small Business Server 2003.
   • Worksheet 2: Shared Folder Information. Record the location of any shared folders that need to be migrated from the source server to the destination server.
   • Worksheet 3: Location of Data for Line-of-Business Applications and of General User Data. Record the location of any data for line-of-business applications or of any general user data that is not located in a shared folder and that needs to be migrated from the source server to the destination server.
   • Worksheet 4: Microsoft Connector for POP3 Mailboxes Information. If you are using the Microsoft Connector for POP3 Mailboxes on your computer running Small Business Server 4.5, record the information for each account that is configured. Later in the migration, you will reconfigure the accounts on the destination server.
   • Worksheet 5: Custom Settings. If you have configured custom settings for your Exchange server SMTP connector, DHCP scope options, DNS records, Routing and Remote Access service settings, Group Policy settings, Proxy Server, or any custom IIS Web sites, record the information. Later in the migration, you will reconfigure the settings on the destination server.
   • Worksheet 6: Exchange Server 5.5 Information. If you are running Exchange Server 5.5 and have created distribution lists, created custom recipients, or set custom permissions for your public folders, record the permissions. Later in the migration, you will reconfigure them on the destination server.
2. Complete the form titled “Required Information for Connecting to the Internet.” The form is available in Appendix A of Getting Started (if you are using the retail product) or in Completing Setup (if you purchased your server from an OEM). To download a copy of the appendix, see the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20122).

To export public folders and the Administrator account mailbox and rules

If you are running Exchange Server 5.5 and want to migrate public folders or the Administrator account mailbox, you must export them to .pst files because migrating them with the Exchange Migration Wizard is not supported. If the Administrator account mailbox has any mailbox rules, you must export them as well. For more information about exporting to a .pst file or exporting mailbox rules, on the client computer see the Help for the Outlook® messaging and collaboration client.

1. On a client computer running Outlook, export public folders to a .pst file.
   1. Log in as Administrator to a client computer.
   2. Open Outlook.
   3. In Folder List, select All Public Folders.
   4. Follow the Outlook Help instructions for exporting all public folders to a .pst file. Ensure that you select the Include subfolders check box on the page where you select the folder to export from.

2. Export the Administrator account mailbox to a .pst file.
3. Export the Administrator account mailbox rules.

To request that users delete unnecessary e-mail and files

To reduce the time it takes to migrate files and mailboxes, it is recommended that you request users on your network to delete unnecessary e-mail and files by doing the following:

1. If you are running Exchange 5.5 Server on your source server, have users delete any unneeded mail from mailboxes, including mail in the Deleted Items and Sent Items folders.

2. Archive older mail to a .pst file, if appropriate. For more information about creating a .pst file, see Outlook Help on the client computer. If you want to determine the size of each user mailbox, complete the following from the source server:
   1. On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator.
   2. In the console tree, double-click YourExchangeSite, double-click Configuration, double-click Servers, double-click YourExchangeServer, double-click Private Information Store, and then click Mailbox Resources. The Total K column in the details pane lists the size of each user mailbox.
3. Review and delete unneeded personal documents from the user folder, the Company Shared folder, and any other shared folders on the server.

4. If Outlook rules are used, users must export the rules to a file. Outlook rules are not preserved when mailboxes migrate to the destination server.

To verify that hardware drivers and existing software are supported

If you plan to move hardware or install existing software from your source server to the destination server, you must ensure that hardware and existing applications are compatible. To do so, check the hardware and software compatibility information in the Windows Server Catalog at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20157).

To ensure that the source server is running Windows NT Server 4.0 Service Pack 6a

You must be running the high-encryption version of Windows NT Server 4.0 Service Pack 6a in order for ADMT to migrate your user, group, and computer accounts.

1. To verify that Windows NT Server 4.0 Service Pack 6a is installed on the source server, click Start, click Run, and then type Winver. The About Windows NT dialog box appears. Ensure that Service Pack 6a is listed.
2. Verify that the server is running the high-encryption pack. To do so, double-click Internet Explorer on the desktop. Click Help, and then click About Internet Explorer. Cipher Strength should be set to 128-bit. If the cipher strength is not listed, you can verify the encryption level by checking the version listed for the Schannel.dll file.
   1. In Windows Explorer, browse to Systemroot\System32\Schannel.dll.
   2. Right-click Schannel.dll, and then click Properties.
   3. Click the Version tab. If the description says TLS/SSL Security Provider (US/Canada Use Only), it is 128-bit encryption. If you are not running Service Pack 6a or you do not have the high-encryption pack, download the high-encryption version of Windows NT Server 4.0 Service Pack 6a from the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=19598). You should back up your server, and then install the service pack. After you install the service pack, it is recommended that you complete another backup.

To ensure that your server is running the latest service packs

It is highly recommended that the source server run the latest service packs, because they were used for the baseline testing of this document. Before installing a service pack, back up your source server.

1. If you are running Exchange Server 5.5, ensure that you are running Service Pack 4.
   1. On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator.
   2. On the Help menu, click About Microsoft Exchange Server.
   3. Ensure that Service Pack 4 is listed as the version. If you are not running Service Pack 4, download and then install the service pack from the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20159).

2. If you are running SQL Server 7.0, ensure that you are running Service Pack 4.
   1. On the source server, click Start, point to Programs, point to Microsoft SQL Server 7.0, and then click Enterprise Manager.
   2. Double-click SQL Server Group, right-click YourServerName, and then click Properties.
   3. Ensure that the version number is 7.00.1063 and that you are running Service Pack 4.

To back up the source server

The evening prior to migrating data and settings, back up your source server to protect your data from accidental loss in the unlikely event of an error occurring during the migration.

1. Complete a virus scan of all drives and files on the source server.
2. Create or update your Emergency Repair Disk (ERD) for the source server. For more information about creating an ERD, see Help.
3. After completing the virus scan, complete and verify a full backup of the source server.
4. Verify that the backup ran successfully. To test the integrity of the backup, select random files from your backup, restore them to an alternative location, and then confirm that the backed up files are the same as the original ones.

To notify users of the migration

• At this point, if users are still connected to the source server, they must log off the domain.
• You can quickly notify all users either by using Instant Messaging or by using the net send command if Messenger Service is running on both the source server and client computers. For example, to use Messenger Service from the command prompt, type: Net send * You must log off from the domain in approximately 5 minutes. At that point, the Internet will also be unavailable. Wait the specified amount of time, and then continue.

Step 2. Required Steps to Install Windows Small Business Server 2003 on the Destination Server

In this step, you install Windows Small Business Server 2003 by completing the following tasks: disable the DHCP Server service on the source server, connect the source and destination servers for the migration, install Windows Small Business Server 2003 by using the specified requirements, and complete the Network Tasks on the To Do List (which appears at the end of Setup). After completing the Network Tasks, you must disconnect the destination server from the Internet and then disable real-time antivirus software on both servers so that it does not interfere with the transfer of data during the migration.

You can install Windows Small Business Server 2003 once you have collected information in “Step 1. Prepare for the Migration” if the new computer is connected to a hub or switch that is not connected to the existing network. You can then stop the DHCP Server service on the existing network and connect the computer running Windows Small Business Server 2003 (destination server) to the existing network.

To disable DHCP on the source server

At the end of the migration, because the source server is retired, the DHCP Server service must be running on the destination server, unless you have a router device that provides the service. In order for the DHCP Server service to be installed on the destination server, you must disable the DHCP Server service on the source server before connecting the destination server to the network.

1. On the source server, click Start, point to Settings, and then click Control Panel.
2. Double-click Services.
3. Select Microsoft DHCP Server, and then click Stop. After the service stops, click Startup, and then click Disabled.

To connect servers for the migration

Before beginning the migration, it is recommended that you disconnect your Internet connection device from the Internet. Additionally, you must connect the local network adapter for the destination server to the local network used by the source server.

1. Before connecting the computers, disconnect both of them from the Internet. Neither server should be connected to the Internet during the migration. Also, after disabling the Internet connection device, from the destination server, click Start, click run and type cmd. In the Command prompt window, type ipconfig /flushdns. For broadband connections, it is recommended that you disconnect the connection from the broadband device to your Internet service provider. For details, see Figure 1.1. Figure 1.1  
2. Connect the network adapter that the destination server will use to connect to the local network to the same hub or switch on which the local network adapter on the source server is connected. See Figure 1.1.

To prevent confusion about which network cable connects to the local network and which connects to the Internet, it is recommended that you label your cables and networking devices.

Requirements for Installing the Destination Server

If you are installing a retail version of Windows Small Business Server 2003, see Chapter 3A of Getting Started for step-by-step instructions.

If you purchased your server from an original equipment manufacturer (OEM) and Windows Small Business Server 2003 was already installed, see Chapter 3A of Completing Setup.

Complete a new installation on the destination server by using the information specified in the following list. When entering the computer name, full DNS name for internal domain, NetBIOS domain name, IP address of local network adapter, and built-in Administrator account name and password, refer to information you collected in “Worksheet 1: Source and Destination Computer Information.”

1. If you are moving a fax device from the source server, you should do so before beginning the installation. Ensure that you have first checked the hardware compatibility information in the Windows Server Catalog at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20157).
2. With the retail product, when you are prompted to select a file system for the operating system partition, you must select NTFS.
3. When prompted for the Administrator password, you must use the same Administrator password as the password used on the source server.
4. When prompted for the computer name, you must use a standard computer name that is not used by another computer on the network. A standard computer name is a unique name of up to 15 standard characters: A–Z, 0–9, and the hyphen (-).
5. On the Internal Domain Information page of Windows Small Business Server 2003 Setup, ensure that the NetBIOS domain name is different from the NetBIOS domain name used by the source server. If the NetBIOS domain name for the source and destination servers are the same, the migration will fail.
6. During Windows Small Business Server 2003 Setup, if Setup detects DHCP running on the router device, you must choose whether to run DHCP on the router device or on the destination server. It is recommended that you run DHCP on the destination server. If you choose to continue running DHCP on the router device and later decide to use DHCP on the destination server, see the instructions in Help for making this change. Click Start, click Help and Support, and then search for “Best practice DHCP Small Business Server.”
7. When prompted for an IP address, enter an IP address that is not being by another computer in the network and is within the same range used by the source server.

8. When the To Do List appears, if you have Windows Small Business Server 2003 Premium Edition, you can now install SQL Server 2000 and Internet Security and Acceleration (ISA) Server 2000. For step-by-step instructions, insert the Premium Technologies disc into the CD or DVD drive, and then click How to Install when the Autorun page appears.

9. If you have antivirus software for your destination server, it is recommended that you install it before connecting to the Internet.

To complete Network Tasks

Temporarily connect the destination server to the Internet connection device and complete the Network Tasks on the To Do List. You will complete the Management Tasks later in the migration.

• View Security Best Practices. It is recommended that you read through and complete security best practices to help you secure your network. Clicking this task displays a list of security best practices.
• Connect to the Internet. You must complete this task to ensure that your Internet connection is properly configured for your small-business network. Clicking this task starts the Configure E-mail and Internet Connection Wizard. Follow the instructions to configure your server's network, firewall, secure Web site, and e-mail settings.

• Configure Remote Access. Complete this task if you want to allow remote client computers to connect to your local network through virtual private network (VPN) connections, dial-in connections, or both. Clicking this task starts the Remote Access Wizard. If users have external client computers, they should delete the existing VPN connection and then configure a connection to the destination server by using the Remote Web Workplace after the migration is complete. For more information about using the Remote Web Workplace, click Start, click Help and Support, and then search for "Remote Web Workplace."
• Activate Your Server. You must activate your server. Clicking this task starts the Windows Product Activation Wizard. Follow the instructions to activate your server.
• Add Client Licenses. If you have more than five client computers, you must complete this To Do List task to add any additional client licenses that you purchased. This task requires that you first activate your server. Clicking this task starts the Add License Wizard.

To disconnect from the Internet and then disable antivirus software on both servers

While migrating data and settings, you must disconnect your Internet connection device from the Internet. You must then disable any disk utilities that are running on the source or destination server, such as real-time antivirus monitoring software. Disk utilities can cause problems during the migration.

Step 3. Prepare Client Computers for the Account Migration

In this step, you prepare client computers that are running Windows NT Workstation 4.0, Windows 2000 Professional, Windows XP Professional, Windows 2000 Server, or Windows Server 2003, or a member server running Windows NT Server 4.0 or later. Computer accounts for client computers running these operating systems are migrated by using the Active Directory Migration Tool (ADMT) in "Step 4. Begin the Migration." Skip this section for client computers running Windows 95, Windows 98, or Windows Millennium Edition because ADMT does not support migrating these computers since they do not have a computer account. You manually configure these client computers for the destination server in "Step 6. Configure Client Computers."

Migration of a backup domain controller running Windows NT Server 4.0 is not supported. Windows Small Business Server 2003 uses the Windows 2000 native domain functional level (in Windows 2000, this is known as native mode), which does not support a backup domain controller. If you want to continue to use the server, you can reinstall the server and join it to the new domain as a member server.

To prepare client computers for the account migration

1. If users have not exported mailbox rules, you should do so now.
2. If you removed the Domain Admins group for the source server from the built-in Administrators group on any client computer, you must add this group back. By default, the Domain Admins group is added to the built-in Administrators group of the client computer when it is joined to the domain.
3. Disable any personal firewalls running on the client computers. For example, disable Internet Connection Firewall on any computer running Windows XP Professional. For more information about how to disable Internet Connection Firewall, click Start, and then click Help on the client computer. For more information about disabling any other personal firewall, see the documentation from the firewall manufacturer.
4. If you are migrating from Small Business Server 4.5, remove the following client applications: WinSock Proxy client (which may also be called Microsoft Proxy Client), Microsoft Fax Server Client, and Modem Sharing Client.
5. Release and then renew the IP address for each client computer to ensure that each computer is obtaining an IP address from the destination server's DHCP Server service.
6. If you are running Windows NT Workstation 4.0 or have a member server running Windows NT Server 4.0, you must install Windows NT 4.0 Service Pack 6a. For more information about the service pack, see "To ensure that the source server is running Windows NT Server 4.0 Service Pack 6a" earlier in this document.
7. Delete the desktop shortcuts for the user's shared folder and Company shared folder. Delete or update any UNC paths, mapped drives, or shortcuts that point to the source server. Additionally, delete any Internet Explorer favorites that point to the source server, including Microsoft Small Business Website, My Internet Home Page, My Intranet Home Page, and SBS User Guide, because they are no longer valid.
8. If the client computers have printers or fax printers that point to the source server, delete them. You will configure the destination server for printers in "Step 5. Configure the Destination Server," and the printers will then be available for the client computers to use.
9. Complete a virus scan of each client computer.
10. Disable any real-time antivirus program on each client computer.
11. Log off of each client computer. Make sure the client computers are turned on and connected to the network.

Step 4. Begin the Migration

In this step, you install and configure ADMT on the destination server and then migrate user, group, and computer accounts. If Exchange 5.5 is running on the source server, you determine if the Exchange server mail quota for the destination server needs to be updated, and then you migrate Exchange mailboxes. Additionally, you must move shared folders and any application data to the destination server and migrate any SQL Server databases to the destination server.

After the migration is complete, users are prompted to create a new password the first time they log on. If you want to migrate user passwords without requiring users to recreate new passwords, follow the instructions in article 326480 “How to Use Active Directory Migration Tool Version 2 to Migrate from Windows 2000 to Windows Server 2003” in the Knowledge Base at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20167). This article also applies to Small Business Server 4.5 and Windows NT Server 4.0. In the article, disregard any references to establishing a trust relationship because this is not used for a Windows Small Business Server migration.

To install ADMT on the destination server

1. Insert Windows Small Business Server 2003 Disc 1 or the DVD (if available) into the CD or DVD drive of the destination server.
2. If you are using the CD, browse to and then double-click D**:\I386\Admt\Admigration.msi**, where D is the letter of your CD drive. If you are using the DVD, type D**:\CD1\I386\Admt\Admigration.msi**, where D is the letter of your DVD drive. The Active Directory Migration Tool Setup Wizard appears.
3. Follow the instructions to complete the Active Directory Migration Tool Setup Wizard.

To configure ADMT on the destination server

1. On the destination server, click Start, click Run, and then type Cmd.

2. At the command prompt, type each of the following commands:

   Net Localgroup "Pre-Windows 2000 Compatible Access" Everyone /Add
   Net Localgroup "Pre-Windows 2000 Compatible Access" "Anonymous Logon" /Add
   

3. Restart the destination server.

To migrate user accounts

1. On the destination server, click Start, click Run, and then type Cmd.

2. Type the following command, replacing SourceDomainName with the NetBIOS domain name (for example, SmallBusiness) for the source server:

   Runas /Netonly /user:SourceDomainName\Administrator "Mmc \"%ProgramFiles%\Active Directory Migration Tool\Migrator.msc\""
   

    For this command, there is one space after each of the following parameters: Runas, Netonly, Administrator, and Mmc. Otherwise, there are no spaces. If you prefer, copy the text from this document and then paste it in the command line. Be sure to update the SourceDomainNamebefore running the command*.*

3. When prompted, enter the password for the built-in Administrator account. The Active Directory Migration Tool appears.

4. On the Action menu, click User Account Migration Wizard.

5. In the User Account Migration Wizard, configure your server by using the information provided in Table 1.1. Table 1.1 - User Account Migration Wizard

Wizard page	Action
Test or Make Changes	It is recommended that you first click Test the migration settings and migrate later? If any errors result in the test, check the log files indicated on the status page. After resolving any issues, run the User Account Migration Wizard a second time, this time clicking Migrate now?
Domain Selection	Set the Source domain to the source NetBIOS domain name and set the Target domain to the destination NetBIOS domain name. <div class="alert"> Important The next step causes the source server to shut down and restart from a remote location. The server shutdown is irreversible. Make sure that you save and close all open applications otherwise all open data will be lost. When you click Next, if you receive a message that Access is denied (error = 5), cancel the wizard, and then close ADMT. Verify that the source server and destination server Administrator passwords match. From the command prompt, restart ADMT, ensuring that you enter the password correctly. Entering the password incorrectly will cause access to be denied when you run the wizard.
User Selection	Click Add, and then click Advanced. Do not migrate the following accounts because the User Account Migration Wizard does not support this: <ul> <li>For all migrations, do not migrate the built-in Administrator, Guest, IUSR_<em>ServerName</em>, or IWAM_<em>ServerName</em> account.<br /> </li> <li>If you are running SQL Server, do not migrate the SQLAgentCmdExec account.<br /> </li> <li>If you have a line-of-business application that uses its own user account, check the manufacturer's documentation to determine if the account should be migrated.<br /> </li> </ul></li> <li><strong>Select this object type</strong> is automatically set to search for user accounts. Click <strong>Find Now</strong> to view the list of user accounts.<br /> </li> <li>Select the user accounts for each user that you want to migrate to the destination server, and then click <strong>OK</strong>.<br /> </li> </ol></td> </tr> <tr class="even"> <td><p><strong>Organizational Unit Selection</strong></p></td> <td><p>Browse to <strong>MyBusiness\Users\SBSUsers</strong> for the <strong>Target OU</strong>.</p></td> </tr> <tr class="odd"> <td><p><strong>Password Options</strong></p></td> <td><p>Click <strong>Same as user name</strong>. The user password is set to the first 14 characters of the user account name and saved to the location specified for the password file (the default location is \Program files\Active Directory Migration Tool\Logs\Passwords.txt).</p> <p>Consider the following for password options:</p> <ul> <li>Using the same password as the user name will make it easier to configure client computers. The password is temporary and is reset at the end of the migration.<br /> </li> <li>If you follow the instructions in Knowledge Base article 326480 for migrating user passwords, click <strong>Migrate passwords</strong>.<br /> </li> </ul></td> </tr> <tr class="even"> <td><p><strong>Account Transition Options</strong></p></td> <td><ol> <li>Click the <strong>Target same as source</strong> option.<br /> </li> <li>Select the <strong>Migrate user SIDs to target domain</strong> check box.<br /> </li> <li>Click <strong>Next</strong>, and then click <strong>Yes</strong> on the next five message boxes that appear.<br /> </li> <li>Wait for the source server to restart; then, log on to the source server by using the built-in Administrator account.<br /> </li> <li>After logging on to the source server, click <strong>OK</strong> on the destination server to continue.<br /> </li> </ol></td> </tr> <tr class="odd"> <td><p><strong>User Account</strong></p></td> <td><p>For <strong>User Name</strong>, use the built-in Administrator account, and then type the <strong>Password</strong>. Ensure that <strong>Domain</strong> is set to the source domain name.</p></td> </tr> <tr class="even"> <td><p><strong>User Options</strong></p></td> <td><ol> <li>Select the <strong>Translate roaming profiles</strong> check box.<br /> </li> <li>Select the <strong>Update user rights</strong> check box.<br /> </li> <li>Ensure that the <strong>Fix users' group memberships</strong> check box is selected.<br /> </li> <li>Ensure that the <strong>Do not rename accounts</strong> option is selected.<br /> </li> </ol></td> </tr> <tr class="odd"> <td><p><strong>Naming conflicts</strong></p></td> <td><p>Ensure that the <strong>Ignore conflicting accounts and don't migrate</strong> option is selected.</p></td> </tr> <tr class="even"> <td><p><strong>Completing the User Account Migration Wizard</strong></p></td> <td><ol> <li>Click <strong>Finish</strong>, and the <strong>Migration Progress</strong> dialog box appears. When <strong>Status</strong> indicates <strong>Completed</strong>, the migration of the user accounts is complete.<br /> </li> <li>Click <strong>View Log</strong> if any errors occur.<br /> </li> </ol></td> </tr> </tbody>

To migrate group accounts

1. On the destination server, in the Active Directory Migration Tool, on the Action menu, click Group Account Migration Wizard.

2. In the Group Account Migration Wizard, configure your server by using the information provided in Table 1.2. Table 1.2 - Group Account Migration Wizard

Wizard Page	Action
Test or Make Changes	It is recommended that you first click Test the migration settings and migrate later? If any errors result in the test, check the log files indicated on the status page. After resolving any issues, run the Group Account Migration Wizard a second time, this time clicking Migrate now?
Domain Selection	Ensure that the Source domain is set to the source NetBIOS domain name and that the Target domain is set to the destination NetBIOS domain name.
Group Selection	Click Add, and then click Advanced. The Select this object type is automatically set to search for group accounts. Do not migrate the following accounts because the Group Account Migration Wizard does not support this: <ul> <li>For all migrations, do not migrate the built-in groups, which include: Account Operators, Administrators, Backup Operators, Domain Admins, Domain Guests, Domain Users, Guests, Print Operators, Replicator, Server Operator, and Users.<br /> </li> <li>Do not migrate the <em>DomainName$$$</em> or MTS impersonators groups.<br /> </li> </ul></li> <li>Click <strong>Find Now</strong> to view the list of group accounts.<br /> </li> <li>Select the group accounts for groups that you want to migrate to the destination server, and then click <strong>OK</strong>.<br /> </li> </ol></td> </tr> <tr class="even"> <td><p><strong>Organizational Unit Selection</strong></p></td> <td><p>Browse to <strong>MyBusiness\SecurityGroups</strong> for the <strong>Target OU</strong>.</p></td> </tr> <tr class="odd"> <td><p><strong>Group Options</strong></p></td> <td><p>Ensure that <strong>Update user rights, Fix membership of groups, Migrate group SIDs to target domain</strong>, and <strong>Do not rename accounts</strong> are selected.</p></td> </tr> <tr class="even"> <td><p><strong>User Account</strong></p></td> <td><p>For <strong>User Name</strong>, use the built-in Administrator account, and then type the password. Ensure that the <strong>Domain</strong> name for the source server is set to the source domain name.</p></td> </tr> <tr class="odd"> <td><p><strong>Naming conflicts</strong></p></td> <td><p>Ensure that <strong>Ignore conflicting accounts and don't migrate</strong> is selected.</p></td> </tr> <tr class="even"> <td><p><strong>Completing the Group Account Migration Wizard</strong></p></td> <td><ol> <li>Click <strong>Finish</strong>, the <strong>Migration Progress</strong> dialog box appears. When <strong>Status</strong> indicates <strong>Completed</strong>, the migration of the group accounts is complete.<br /> </li> <li>Click <strong>View Log</strong> if any errors occur.<br /> </li> </ol></td> </tr> </tbody>

To migrate computer accounts

Complete this procedure to migrate computer accounts for client computers running Windows NT Workstation 4.0, Windows 2000 Professional, Windows XP Professional, or a member server running Windows NT Server 4.0 or later.

1. On the destination server, in the Active Directory Migration Tool, on the Action menu, click Computer Migration Wizard.

2. In the Computer Migration Wizard, configure your server by using the information provided in Table 1.3. Table 1.3 - Computer Migration Wizard

Wizard Page	Action
Test or Make Changes	It is recommended that you first click Test the migration settings and migrate later? If any errors result in the test, check the log files indicated on the status page. After resolving any issues, run the Computer Migration Wizard a second time, this time clicking Migrate now?
Domain Selection	Ensure that the Source domain is set to the source domain name and that the Target domain is set to the destination domain name.
Computer Selection	Ensure that each client computer which you are migrating is turned on and connected to the network. If you migrate a computer account for a client computer that is turned off or is not connected to the network, the configuration of the client computer will fail. Click Add, and then click Advanced. The Select this object type is automatically set to Computers. Click Find Now to view the list of computer accounts. Select the computer accounts for client computers that you want to migrate to the destination server, and then click OK. Do not migrate the computer account for the source server or for client computers running Windows 95, Windows 98, or Windows Millennium Edition. For server computers other than the source server, run the Computer Migration Wizard again to place them in the SBSServers organizational unit.
Organizational Unit Selection	For Target OUof client computers, browse to and select MyBusiness\Computers\SBSComputers. For Target OUof server computers, browse to and selectMyBusiness\Computers\SBSServers.
Translate Objects	Click all check boxes on this page.
Security Translation Object	Ensure that Replace is selected, and then click Next. Click OK when you view the following message: User rights translation will be performed in 'Add' mode only. Any other objects will be translated in adherence to your mode selection.
Computer Options	Set the number of minutes before computers restart after wizard completion to 1 minute and ensure that Do not rename computers is selected.
Naming conflicts	Ensure that the Ignore conflicting accounts and don't migrate option is selected.
Completing the Computer Migration Wizard	When you click Finish, the Migration Progress dialog box appears. When Status indicates Completed, the migration of the computer accounts is complete. If a computer account fails to migrate or if it migrates but the agent to configure the client computer fails, do the following: <ol> <li>Check the log files and resolve any issues.<br /> </li> <li>Ensure that a computer account was not created in Active Directory (on the destination server, click <strong>Start</strong>, click <strong>Run</strong>, and then type <strong>Dsa.msc</strong> to open Active Directory Users and Computers).<br /> </li> <li>Rerun the Computer Migration Wizard to migrate the computer account again.<br /> </li> <li>When you test the computer account migration, you receive an event message indicating that the tool was unable to change domain affiliation (event message 37075). This is expected because the account migration was only running as a test.<br /> </li> </ol></li> <li>Click <strong>View Log</strong> if any errors occur.<br /> </li> <li>After you click <strong>Close</strong>, the <strong>Active Directory Migration Tool Agent Monitor</strong> dialog box appears, indicating the status of the connection to the client computers that you are migrating.<br /> </li> </ol></td> </tr> </tbody>

To determine if the mail quota for Exchange needs updating

If you are running Exchange Server 5.5 on your source server, and you have a mail quota set to a value other than 175,000 KB for the warning and 200,000 KB for the limit for sending and receiving e-mail, you must update the Exchange mail quota settings for the destination server.

1. On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator.
2. Double-click YourExchangeSite, double-click Configuration, double-click Servers, double-click YourServerName, and then click Private Information Store.
3. On the File menu, click Properties.
4. Review the settings for Issue warning (K) and Prohibit send and receive (K). If the quotas are set to something other than 175,000 KB for the warning and 200,000 KB for the limit for sending and receiving e-mail, continue to the next step and update the Exchange mail quota settings on the destination server.
5. On the destination server, click Start, and then click Server Management.
6. Double-click Advanced Management, double-click YourExchangeSite, double-click Servers, double-click YourServerName, double-click YourStorageGroup, right-click Mailbox Store, and then click Properties.
7. On theLimits tab, update the settings for Issue warning at (KB) and Prohibit send and receive at (KB).

To move Exchange mailboxes

If you are running Exchange Server 5.5, move user mailboxes by using the Exchange Migration Wizard.

1. On the destination server, click Start, point to All programs, point to MicrosoftExchange, point to Deployment, and then click Migration Wizard.

2. In the Exchange Migration Wizard, configure your server by using the information provided in Table 1.4. Table 1.4 - Exchange Migration Wizard

Wizard page	Action
Migration	Select Migrate from Microsoft Exchange.
Exchange Server Migration	The page prompts you to ensure that Lightweight Directory Access Protocol (LDAP) is active. To check that the protocol is running, do the following: On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator. Double-click YourExchangeSite, double-click Configuration, double-click Protocols. In the details pane, double-click LDAP (Directory) Site Defaults, and then ensure that it is enabled.
Migration Destination	You must accept the default of Migrate to a computer running Exchange Server.
Source Exchange Server	Type the computer name of the source server, and then type the built-in Administrator account name and password. If you have changed the Exchange SA password to use a password other than the built-in Administrator account, you must update it to use the built-in Administrator account. For more information, search for article 285297 at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20167).
Migration Information	Accept the default of Create/modify mailbox accounts.
Account Migration	Select the accounts for which you want to migrate the mailboxes. Important considerations for account migration: This tool does not support migrating mail for the Administrator account. To migrate mail for this account, from a client computer, use Outlook to export the mail to a .pst file and then later import it. You must also export any mailbox rules for the Administrator account. For more information about exporting to a .pst file or exporting mailbox rules, see Outlook Help on the client computer. If you are migrating the mailbox for an account, the account must have been migrated to the server by using the User Account Migration Wizard discussed earlier in this document.
Container for New Windows Account	Browse to YourDomain\MyBusiness\Users\SBSUsers.

3. Follow the instructions to complete the Exchange Migration Wizard.

To move Users shared folders

You move the Users shared folder by using the Xcopy command. For more information about Xcopy, type Xcopy /? at the command prompt.

1. On the destination server, click Start, click Run, and then type Cmd.

2. At the command prompt, type:

   Xcopy \\SourceServerComputerName\Users \\DestinationServerComputerName\Users /e /o /d /h /v /c>>C:\Copyresults.txt
   

Parameter	Description
SourceServerComputerName	Specifies the computer running Small Business Server 4.5 or Windows NT Server 4.0.
DestinationServerComputerName	Specifies the computer running Windows Small Business Server 2003.
/e	Copies all subdirectories, even if they are empty.
/o	Copies file ownership and discretionary access control list (DACL) information.
/d	Copies only those files whose source time is newer than the destination time. To copy files changed on or after a specified date, type /d:m-d-y, where m-d-y is the specified date, in month-day-year format, to begin checking for file changes.
/h	Copies files with hidden and system file attributes. By default, Xcopy does not copy hidden or system files.
/v	Verifies each new file.
/c	Ignores errors.
>>C:\Copyresults.txt	Appends the results of the copy to a file named Copyresults.txt.

1. Using Windows Explorer, open C:\Copyresults.txt and verify whether any errors occurred during the file copy. You can also compare the number and size of the files that were in the Users folder on the source server with the number of files that are now on the destination server.
2. Because the built-in groups on the source server are not migrated to the destination server, you must update the permissions for each user's folder to include the correct permissions for the destination server.

   1. On the destination server, right-click a user's folder, and then click Properties.

   2. Click the Security tab.

   3. Remove group or user names that are listed as Account Unknown.

   4. Click Advanced.

   5. Clear the following check box: Allow inheritable permissions from the parent to propagate to this object and all child objects. Include these with entries explicitly defined here.

   6. Click Add, and then add the following groups with the specified permissions.

Group	Permissions
Domain Admins	Select Full Control, and then select Apply these permissions to objects and/or containers within this container only.
Folder Operators	Select Full Control, and then select Apply these permissions to objects and/or containers within this container only.
SYSTEM	Select Full Control, and then select Apply these permissions to objects and/or containers within this container only.
Domain Users	Traverse Folder/Execute File, List Folder/Read Data, Read Attributes, Read Extended Attributes, Create Folders/Append Data, and Read Permissions. Do not select the Apply these permissions to objects and/or containers within this container only check box.

7.  Repeat steps a-f for each user folder.

To move additional shared folders

1. On the destination server, create a shared folder for the share that you want to move, and then assign the necessary permissions.
2. Use the previous procedure, "To move Users shared folders," to copy the folder from the source server to the destination server.

To move the Company folder to the intranet Web site

1. On the destination server, click Start, and then click Server Management.
2. In the console tree, click Internal Web Site.
3. In the details pane, click Import Files. The Import Files Wizard appears.
4. On the File and Document Library Location page, do the following: For Copy files from, type: \\SourceServerComputerName\Company, which is the path to the Company shared folder. For Copy files to, either accept the default of https://companyweb/General Documents or click Browse to select a different document library or to create a new document library.
5. If an error occurs while importing files, it may be due to one of the following issues:
   • Files larger than 50 megabytes (MB) are blocked. To change this setting, open a browser window, and then type https://DestinationServerComputerName:8081. Click Configure virtual server settings, click Companyweb, and then click Virtual server general settings. Under Maximum Upload Size, specify a file size.
   • Files with certain extension types (such as .exe and .vbs) are blocked. To verify if a file type is blocked or to modify the list of blocked extensions, open a browser window, type https://DestinationServerComputerName:8081, and then click Manage blocked file types.
   • Files that do not contain data are not migrated.

To move additional data

If you recorded the location of data to move in Worksheet 3, “Location of Data for Line-of-Business Applications and of General User Data,” you can copy the data to the destination server. Or, if you want to retain the file ownership and discretionary access control list (DACL) information, you can use the Xcopy command described in the procedure, "To move Users shared folders." If you have one or more SQL Server databases, migrate the data by using the next procedure.

1. On the destination server, click Start, click Run, and then type **\\**SourceServerComputerName\DriveLetter$, where DriveLetter is the letter of the specific drive where the files are located (such as C$ or D$).
2. Browse to the location of the additional data that you want to move, and then copy the data to the desired location on the destination server.
3. Repeat this process for any additional applications that have data folders.

To move SQL Server databases

If you are migrating to the Premium Edition of Windows Small Business Server 2003 and have SQL Server 2000 running on the destination server, you must migrate your SQL Server databases.

1. If you have not yet installed SQL Server 2000 on the destination server, do so now. To do so, follow the Premium Technologies installation instructions available from the Autorun page of the Windows Small Business Server 2003 Premium Technologies disc. Ensure that you verify the collation settings prior to installing SQL Server 2000, as discussed in the Premium Technologies installation instructions.
2. Search for article 314546, "How to: Move Databases Between Computers That Are Running SQL Server" at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20167), and then follow the instructions in the article.

Step 5. Configure the Destination Server

In this step, you assign user accounts to a Windows Small Business Server 2003 template and deploy applications to the client computers so that users can properly access the Windows Small Business Server 2003 network. You must also complete additional configuration settings on the destination server, including completing the Management Tasks on the To Do List, configuring custom settings from the source server, configuring distribution lists and custom recipient policies, and configuring the Microsoft Connector for POP3 Mailboxes.

To assign permissions to migrated accounts

You must complete this task for users to have access to the necessary resources on the Windows Small Business Server 2003 network.

When you complete this step, if you configured the destination server for remote access, you must assign users the necessary permissions. You can also deploy the Connection Manager configuration package, which configures the settings necessary for connecting mobile and remote client computers to the network.

1. On the destination server, click Start, and then click Server Management.
2. In the details pane, click Users, and then click Change User Permissions.
3. On the Template Selection page, select a Windows Small Business Server 2003 template for each user account that was migrated from the source server, and then click Add permissions to any previous permissions granted to the users.

4. Follow the instructions to complete the Change User Permissions Wizard.

To assign applications to client computers

Complete this procedure to assign applications to client computers running Windows 2000 Professional or Windows XP Professional. On client computers running any other Windows operating system, you must install the software manually. For more information, see "To configure client computers that are running operating systems earlier than Windows 2000 Professional" later in this document.

If you have member servers running Windows NT Server 4.0 or later, follow the instructions for configuring a second server. On the destination server, click Start, click Server Management, click Server Computers, click More Information, and then click Configure additional servers.

1. On the destination server, click Start, click Server Management, and then in the console tree, click Client Computers.

2. In the details pane, click Assign Applications to Client Computers.

3. Complete the Assign Application Wizard by using the information in Table 1.5. Table 1.5 - Assign Applications to Client Computers

Wizard page	Action
Client Computers	Add the computers that you want to configure with client applications.
Client Applications	Install the default applications. If you install ISA Server on the destination server, you must deploy Microsoft Firewall Client to each client computer. To do so, click Edit Applications. The Set Up Client Applications Wizard appears. On the Available applications page, click Add. The Application Information dialog box appears. In the Application Name box, type Firewall Client, and then type or browse to \\DestinationServerComputerName\Mspclnt\Setup.exe. Complete the Set Up Client Applications Wizard, and then return to the Assign Applications Wizard.

4. Follow the instructions to complete the Assign Applications Wizard.

To complete Management Tasks on the To Do List

• If you closed the To Do List, you can return to it through Server Management.
  1. On the destination server, click Start, and then click Server Management.
  2. In the console tree, click To Do List.
• Add a Printer. Complete this task to install a printer. Clicking this task starts the Add Printer Wizard.
• Add Users and Computers. Complete this task if you are adding new users and computers to the network. Clicking this task starts the Add User Wizard. After you provide user account information, the Set Up Computer Wizard enables you to configure a client computer for new users.

• Configure Fax. If you have a fax modem, complete this task to configure Fax Service for sending and receiving faxes. Clicking this task starts the Fax Configuration Wizard.
• Configure Monitoring. Complete this task to set up alert notifications and server performance and usage reports for your server. Clicking this task starts the Monitoring Configuration Wizard.
• Configure Backup. Complete this task to configure server backup. Clicking this task starts the Windows Small Business Server Backup Configuration Wizard. Third-party software is not required.

Configure custom settings from the source server

If you completed “Worksheet 5: Custom Settings,” you must re-create these settings on the destination server.

To configure distributions lists and custom recipient policies

If you completed “Worksheet 6: Exchange Server 5.5 Information,” you must reconfigure the custom recipient policies and distribution groups on the destination server. If you had distribution lists or custom recipient policies on the source server, re-create them on the destination server.

1. To create distribution lists, on the destination server, click Start, and then click Server Management.
2. In the console tree, click Distribution Groups.
3. In the details pane, click Add a Distribution Group.
4. Follow the instructions to complete the wizard.

For information about configuring custom recipient policies, see Exchange Server Help.

To enable sending\receiving e-mails for migrated security groups and distribution groups

If you have migrated any security or distribution groups that were mail enabled, then after migration, you can no longer send/receive e-mails to them. In order to resolve this problem you need to do the following:

1. Click Start, point to Administrative Tools, and then click Active Directory Users and Computers.
2. In the Active Directory Users and Computers console, expand YouDomainName, where YourDomainname is the name of your domain (for example, smallbusiness.local).
3. Expand MyBusiness and do the following:
   1. click Security Group, and in the details pane right-click the security group to enable sending/receiving of e-mail by this group, and then click Exchange Tasks.
   2. click Distribution Group, and in the details pane right-click the distribution group to enable sending/receiving e-mail by this group, and then click Exchange Tasks.
4. In the Exchange task Wizard do the following
   1. In the Available Tasks page, click Establish E-mail Addresses on Groups.

On the Establish E-mail Address on Groups page, under Alias, type the alias for the group.

To configure POP3 e-mail accounts for the Microsoft Connector for POP3 Mailboxes

If you completed “Worksheet 4: Microsoft Connector for POP3 Mailboxes Information,” you must reconfigure the POP3 accounts on the destination server.

1. On the destination server, click Start, and then click Server Management.
2. In the console pane, click Internet and E-mail.
3. In the details pane, click Manage POP3 E-mail, and then click Open POP3 Connector Manager.

To update custom logon scripts

If you copied custom logon scripts to the destination server while migrating your data, you must now update each user account to refer to the destination server for the logon script, and you must update any references to the source server in the logon script to now reference the destination server.

Step 6. Configure Client Computers

In this step, you configure e-mail and proxy settings for client computers running Windows 2000 Professional or Windows XP Professional. If you have client computers running operating systems earlier than Windows 2000 Professional, you must manually configure them for the destination server, install applications, and configure e-mail and proxy settings. It is also recommended that you verify that client computers can connect to all necessary resources and files. You can also import Exchange server public folders now that a client computer is configured to connect to Exchange server on the destination server.

To disconnect the source server from the network

• At this point, disconnect the local network adapter for the source server from the local network. You will retire the source server in “Step 7: Complete the Migration.”

To configure client computers running Windows 2000 Professional or Windows XP Professional

1. Ensure that the client computer is set to log on to the destination domain, and then log on to each client computer by using the user account for that computer. Unless you migrated user passwords following the instructions in Knowledge Base article 326480, referenced in “Step 4. Begin the Migration,” the user account passwords were saved to the password file. The default location is \Program files\Active Directory Migration Tool\Logs\Passwords.txt.

2. For client computers that you deployed applications to, the Client Setup Wizard dialog box appears. Click Start Now to install the applications. Wait for the wizard to complete, and then continue to the next step.
3. Open Control Panel, double-click Mail, and then update the mail properties to the destination server.
4. If you installed ISA Server on the destination server, you must configure the Internet Explorer proxy settings.
   1. Open Internet Explorer.
   2. Click the Tools menu, and then click Internet Options.
   3. Click the Connections tab, and then click LAN Settings.
   4. Select the Use a proxy server for your LAN check box, type the destination server name for the Address field, and then type 8080 for the Port field.
5. If you were running Proxy Server on the source server and did not install ISA Server on the destination server, ensure that the proxy client settings check boxes in Internet Explorer are cleared.
   1. Open Internet Explorer.
   2. On the Tools menu, click Internet Options.
   3. Click the Connections tab, and then click LAN Settings.
   4. Ensure that neither the option to automatically detect settings or the option to use a proxy server is selected.
6. Re-enable antivirus software on each client computer.
7. Skip to "To confirm connectivity for client computers."

To configure client computers that are running Windows 95, Windows 98, Windows Millennium Edition, or Windows NT Workstation 4.0

Client computers running Windows 95, Windows 98, Windows Millennium Edition, or Windows NT Workstation 4.0 must be manually configured for the destination domain.

1. Configure each client computer for the destination domain, and then manually install applications. For step-by-step instructions, on the destination server, click Start, click Help and Support, and then search for "Configure client computers running earlier versions of Windows" and "Install applications on client computers running earlier versions of Windows."

2. Using Windows Explorer, search for *.pwl to locate any Windows passwords that were set locally on the computer. Delete any .pwl files found in the search.
3. Open Control Panel (click Start, click Run, and then type Control) and remove Microsoft Proxy Client and Modem Sharing Client for Windows 95.
4. Log on to each client computer by using the user account. Unless you migrated user passwords following the instructions in Knowledge Base article 326480, referenced in “Step 4. Begin the Migration,” the user account passwords were saved to the password file. The default location is \Program files\Active Directory Migration Tool\Logs\Passwords.txt.

5. Open Control Panel, double-click Mail, and then update the mail properties to the destination server.
6. Delete any Internet Explorer favorites that point to the source server, including Microsoft Small Business Website, My Internet Home Page, My Intranet Home Page, and SBS User Guide, because they are no longer valid.
7. Delete or update the desktop shortcuts for the user and Company shared folders. Also delete or update any UNC paths, mapped drives, or shortcuts that point to the source server.
8. If client computers have printers or fax printers that point to the source server, delete the printers or fax printers. The printers were already configured on the destination server in "Step 5. Configure the Destination Server."
9. If you installed ISA Server on the destination server, you must install Firewall Client. Click Start, click Run, and then type \\ServerName\Mspclnt\Setup.exe.

10. If you installed ISA Server on the destination server, you must configure the Internet Explorer proxy settings.
    1. Open Internet Explorer.
    2. Click the Tools menu, and then click Internet Options.
    3. Click the Connections tab, and then click LAN Settings.
    4. Select the Use a proxy server for your LAN check box, type the destination server name for the Address field, and then type 8080 for the Port field.
11. If you were running Proxy Server on the source server and did not install ISA Server on the destination server, ensure that the proxy client settings in Internet Explorer are cleared.
    1. Open Internet Explorer.
    2. On the Tools menu, click Internet Options.
    3. Click the Connections tab, and then click LAN Settings.
    4. Ensure that neither the option to automatically detect settings or the option to use a proxy server is selected.
12. Re-enable antivirus software on each client computer.

To update/delete any references of the source server on the client computers

You must update or delete any references on the client computer name (for example, with UNC paths, mapped drives, shortcuts, or printers that were moved from the source server to the destination server) which point to the source server. This is because the destination computer name must be different from the source computer name, if a client computer refers to the source computer name, the references will become invalid during the migration .

To confirm connectivity of client computers

Ensure that client computers have access to all necessary resources and files.

1. Ensure that the source server is disconnected from the network.
2. Send a test e-mail message to one or more users, and then verify that they received the message.
3. Connect to any shared folders or line-of-business applications.
4. If the client computer uses a shared printer, print a test document.

To import public folders to the destination server

If you exported public folders from your source server to a .pst file, you can now import the .pst file to the destination server.

1. On a client computer, log in using an account with Administrator permissions or permissions to create public folders.
2. Open Outlook. Import the public folders, which you saved to a .pst file in “Step 1: Prepare for the Migration,” to the currently selected folder. If you are using Outlook 2003, use the following procedure:
   1. From the Go menu, click Folder List to display the Public Folders.
   2. Double-click Public Folders, and then double-click All Public Folders.
   3. From the File menu, click Import. The Import Export Wizard appears. Select Import from another program file.
   4. On the Import a filepage, select Personal Folder File (.pst).
   5. On the Import Personal Folders page, browse to the public folder you saved, and ensure that Include Subfolders is selected.
   6. Select IPM-Subtree, and then select Import items into current folder.
   7. Follow the instructions to complete the wizard.
3. If you had assigned special permissions to any of the public folders you just imported, you must configure the permissions now.
   1. On the destination server, click Start, and then click Server Management.
   2. Double-click Advanced Management, double-click YourExchangeSite, double-click Servers, double-click YourServerName, double-click YourStorageGroup, double-click Public Folder Store, and then click Public Folders.
   3. In the details pane, right-click a public folder, and then click Properties.
   4. Click the Permissions tab, and then click Client permissions.
   5. Configure the Name,Role, and Permissions fields to your specific needs based on the information you recorded in “Worksheet 6: Exchange Server 5.5 Information.”
4. You should then delete the .pst file from the client computer.

Step 7. Complete the Migration

In this step, you remove permissions that were necessary for the migration, and you uninstall ADMT from the destination server. You also configure password policies to prompt users are for a new password the first time they log on to the new domain (destination server). After verifying that all necessary data and settings were migrated, you retire the source server.

To remove permissions used for the migration

If you have member servers running Windows NT Server 4.0, skip this procedure so that the member servers have access to the new domain.

1. On the destination server, click Start, click Run, and then type Cmd.

2. At the command prompt, type each of the following commands:

   Net Localgroup "Pre-Windows 2000 Compatible Access" Everyone /Delete Net Localgroup "Pre-Windows 2000 Compatible Access" "Anonymous Logon" /Delete
   

3. Restart the destination server.

4. Log back on to the destination server, using the built-in Administrator account.

To uninstall ADMT on the destination server

After you have migrated all user, group, and computer accounts, you should remove ADMT.

1. On the destination server, click Start, point to Control Panel, and then click Add or Remove Programs.
2. Click Active Directory Migration Tool, and then click Remove.
3. Follow the instructions to remove the tool.

To configure password policies

After verifying connectivity for each client computer, reset user passwords to prompt the user to change the password at first logon.

1. On the destination server, click Start, and then click Server Management.
2. In the console tree, click Users.
3. In the details pane, click Configure Password Policies.
4. It is recommended that you select all three options for the password policies.
5. Click the Configure password policiesdropdown box, and then click Immediately.

6. Unless you migrated user passwords following the instructions in Knowledge Base article 326480 referenced in "Step 4. Begin the Migration," delete the password file that was saved by ADMT. The default location is \Program files\Active Directory Migration Tool\Logs\Passwords.txt.
7. For client computers running Windows 95, Windows 98, or Windows Millennium Edition, if the user encounters an error while trying to change the password, you may need to manually set the password.
   1. Click Start, click Server Management.
   2. In the console tree, click Users.
   3. In the details pane, select a user account, and then click Change Password.
   4. Enter and then confirm a password in the Reset Password dialog box. Ensure that the User must change password at next logoncheck box is clear.

To reconnect to the Internet

Reconnect the Internet connection device to the Internet so that your destination server and client computers can connect to the Internet.

To retire the source server

It is recommended that you leave the source server disconnected from the network but still available for at least one week to ensure that all necessary data was migrated. You must then reformat the source server. You can then use the source server as a second server. For more information about second servers for Windows Small Business Server 2003, on the destination server click Start, click Server Management, click Server Computers, click More Information, and then click Configure additional servers.

Related Links

See the following resources for further information:

• For a copy of Getting Started, see the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20122).
• For more information about the Active Directory Migration Tool, on the destination server, browse to \Program Files\Active Directory Migration Tool, and then double-click DomainMig.chm.
• For more information about the Exchange Migration Wizard, search for article 328871, “How to: Use the Exchange Migration Wizard to Migrate Mailboxes From an Exchange Organization” at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20167). In the article, disregard any information about creating a trust as this is not necessary for a Windows Small Business Server migration.
• For information about troubleshooting migrations, see the Windows Small Business Server 2003 Troubleshooting document at the Microsoft Web Site (https://go.microsoft.com/fwlink/?LinkId=20282).
• For the latest information about Windows Small Business Server 2003, see the Windows Small Business Server Web site (https://go.microsoft.com/fwlink/?LinkId=16918).

Migration Worksheets

Worksheet 1    Source and Destination Computer Information

Prepared by:

Date Prepared:

1. On the source server, click Start, point to Programs, point to Administrative Tools (Common), and then click DHCP Manager.
   
2. Double-click Local Machine, double-click YourScope. A list of computers and IP addresses are displayed.
   Destination Server__________________________________________________
   

Built-in Administrator account name

The Administrator accounts on both the source and destination servers must be named Administrator. If you renamed a built-in Administrator account to something other than Administrator, you must rename the account back to Administrator for the migration.

Source Server_Administrator________________________________________

Destination Server_Administrator________________________________________

Built-in Administrator account password

The Administrator account password for the destination server must be the same as for the source server. If the Administrator account password is blank, the migration will fail. For security reasons, it is recommended that you not record the administrator password.

Source Server_(Do not record the password.)__________________________

Destination Server_(Same password. Do not record.)_______________________

Worksheet 2    Shared Folder Information

Prepared by:

Date Prepared:

Shared Folders on Small Business Server 4.5 Record the name of the Users shared folder. In both Small Business Server 4.5 and Windows Small Business Server 2003, the default share name is Users. To determine which shared folders are on the source server, click Start, click Run, and then type \\SourceServerComputerName. Users shared folder name__________________________________________________ Record the name of the ClientApps folder, if there are applications that you want to continue to use in the folder. You will then copy the contents of the share to the destination server in “Step 4, Begin the Migration.” In Small Business Server 4.5 and Windows Small Business Server 2003, the default share name is ClientApps. ClientApps folder name____________________________________________________ Record the name of the Company shared folder. In Small Business Server 4.5, the default share name is Company. You will then import the Company folders into the company intranet Web site on the destination server at https://companyweb. Company shared folder name______________________________________________

Other shared folders List the names of other shared folders to migrate. Do not migrate the Printers or Scheduled Tasks shared folders. Additionally, unless you have custom logon scripts, do not migrate the NETLOGON shared folder. If you are migrating from Small Business Server 4.5, do not migrate the Mspclnt or Clients shared folders, because Windows Small Business Server 2003 includes updated versions. It is not necessary to migrate each individual user’s shared folder because the folders will be migrated when the Users shared folder is migrated. If Exchange Server 5.5 is installed, do not migrate the Add-ins, Address, Resources, or Tracking.log shared folders. Shared folder names ________________________________________________________________________ ________________________________________________________________________ ________________________________________________________________________

Worksheet 3    Location of Data for Line-of-Business Applications and of General User Data

Prepared by:

Date Prepared:

Application or general data folder name

Path to data

Notes

Worksheet 4    Microsoft Connector for POP3 Mailboxes Information

Prepared by:

Date Prepared:

Click the User Mailboxes tab. Click each mailbox, and then click Edit to view the properties. Record the properties on the form titled “Required Information for Connecting to the Internet.”

Click the Mailing Lists tab. If a mailing list is defined, click it, and then click Edit to view the properties. Record the properties on the form titled “Required Information for Connecting to the Internet.”

Note

To re-create the mailing lists, you must create a routing rule using the POP3 Connector Manager. For more information about routing rules and the POP3 Connector Manager, after Windows Small Business Server 2003 Setup is complete, click Start, click Help and Support , and then search for “Routing rules.”

Worksheet 5    Custom Settings

Prepared by:

Date Prepared:

Exchange server SMTP connector __________________________________________________

DHCP scope options ___________________________________________________________

DNS records ___________________________________________________________________

Routing and Remote Access settings _______________________________________________

Group Policy settings ____________________________________________________________

Proxy Server settings ____________________________________________________________

Custom IIS Web sites ___________________________________________________________

Worksheet 6    Exchange Server 5.5 Information

Prepared by:

Date Prepared:

Distribution lists If you are running Exchange Server 5.5 and you have created distribution lists, record the names of the distribution lists. On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator. In the console tree, double-click YourExchangeSite, and then click Recipients. On the Viewmenu, click Distribution Lists. In the details pane, double-click a distribution group to view membership, and then record this information in the following table. Distribution list name__________________________________________________________ Group members_______________________________________________________________ Distribution list name__________________________________________________________ Group members_______________________________________________________________ Distribution list name__________________________________________________________ Group members_______________________________________________________________

Custom Recipients If you are running Exchange Server 5.5 and you have created custom recipients, record this information so that you can configure custom recipients on the destination server at the end of the migration. On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator. In the console tree, double-click YourExchangeSite, and then click Recipients. In the details pane, double-click a custom recipient to view the settings, and then record this information in the following table. Custom recipient__________________________________________________________ Settings __________________________________________________________ Custom recipient__________________________________________________________ Settings __________________________________________________________ Custom recipient__________________________________________________________ Settings __________________________________________________________

Public Folders If you are running Exchange Server 5.5 and have set custom permissions for your public folders, record the permissions so that you can reconfigure them after you import the public folders to the destination server. On the source server, click Start, point to Programs, point to Microsoft Exchange, and then click Microsoft Exchange Administrator. In the console tree, double-click Folders, double-click Public Folders, and then click a public folder. On the Filemenu, click Properties, On the Generaltab, click Client Permissions. Record the Name, Role, and any special permissions for each public folder in the following table. Name__________________________________________________________ Role__________________________________________________________ Special permissions__________________________________________________________ Name__________________________________________________________ Role__________________________________________________________ Special Permissions__________________________________________________________ Name__________________________________________________________ Role__________________________________________________________ Special permissions__________________________________________________________