Migrate Domain Local Groups
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
Migrate the domain local groups that exist in Active Directory. You can migrate domain local groups by using the ADMT console or by using a script.
To migrate domain local groups by using the ADMT console
Complete the Group Account Migration Wizard by using the information provided in Table 12.17.
Table 12.17 Using the Group Account Migration Wizard to Migrate Domain Local Groups
Wizard Page Action Test or Make Changes
Click Migrate Now?
Domain Selection
In the Source domain box, type the NetBIOS or DNS name of the source domain, or select the name from a list.
In the Target domain box, type the NetBIOS or DNS name of the target domain.
Group Selection
Click Add.
In the Select Groups dialog box, select all domain local groups that you need to migrate (except built-in and well-known groups), click Add, and then click OK.
Organizational Unit Selection
Type the name of the OU, or click Browse.
In the Browse for Container dialog box, locate the OU in the target domain to which the domain local groups are migrating, and then click OK.
Group Options
The Migrate Group SIDs to target domain and Fix Group Membership check boxes are selected and appear dimmed.
Click Do not rename accounts.
Ensure that no other options are selected.
Naming Conflicts
Click Ignore conflicting accounts and don’t migrate.
To migrate domain local groups by using a script
Use a script that incorporates ADMT commands and options for migrating universal groups. For more information about migrating universal groups, see "Migrate Universal Groups" earlier in this chapter.
For a sample script to assist you in migrating groups, see "Migrating Groups Within a Forest" (DSSRERA_2.wsf) on the Windows Server 2003 Deployment Kit companion CD (or see "Migrating Groups Within a Forest" on the Web at https://www.microsoft.com/reskit).