Move settings and data to the Destination Server for Windows SBS 2011 Essentials migration

Published: March 10, 2011

Updated: May 12, 2011

Applies To: Windows Small Business Server 2011 Essentials

Move settings and data to the Destination Server as follows:

1. Copy data to the Destination Server.

2. Configure the network.

3. Verify Terminal Services Gateway has configured the correct certificates.

4. Remove legacy logon settings and Active Directory Group Policy objects.

5. Remove legacy Active Directory Group Policy objects.

6. Map permitted computers to user accounts.

Copy data to the Destination Server

Before you copy data from the Source Server to the Destination Server, perform the following tasks:

• Review the list of shared folders on the Source Server, including permissions for each folder. Create or customize the folders on the Destination Server to match the folder structure that you are migrating from the Source Server.

• Review the size of each folder and ensure that the Destination Server has enough storage space.

• Make the shared folders on the Source Server Read-only for all users so no writing can take place on the drive while you are copying files to the Destination Server.

To copy data from the Source Server to the Destination Server

1. Log on to the Destination Server as a domain administrator.

2. Click Start, type cmd in the search box, and then press ENTER.

3. At the command prompt, type the following command, and then press ENTER:

   robocopy \\<SourceServerName> \<SharedSourceFolderName> \\<DestinationServerName> \<SharedDestinationFolderName> /E /B /COPY:DATSOU /LOG:C:\Copyresults.txt

   where <SourceServerName> is the name of the Source Server, <SharedSourceFolderName> is the name of the shared folder on the Source Server, <DestinationServerName> is the name of the Destination Server, and <SharedDestinationFolderName> is the shared folder on the Destination Server to which the data will be copied.

4. Repeat the previous step for each shared folder that you are migrating from the Source Server.

Configure the network

To configure the network

1. On the Destination Server, open the Dashboard.

2. Click Server Settings.

3. Click Turn on Remote Web Access.

4. Complete the wizard to configure the router and domain names.

If your router does not support the UPnP framework, or if the UPnP framework is disabled, there may be a yellow warning icon next to the router name. Ensure that the following ports are open and that they are directed to the IP address of the Destination Server:

• Port 80: HTTP Web traffic

• Port 443: HTTPS Web traffic

Verify that Terminal Services Gateway has configured the correct certificates

You need to ensure that Terminal Services Gateway has configured the correct certificates after the back up and restore of the Certification Authority.

To verify the certificates in Terminal Services Gateway

1. Open a Command Prompt window as an administrator. For more information, see To open a Command Prompt window as an Administrator.

2. Type the following, and then press ENTER:

   cd \Program Files\Windows Server\Bin

3. Type the following, and then press ENTER:

   ConfigureRDP.exe

After ConfigureRDP.exe runs, the correct certificates will be configured.

Remove legacy logon settings and Active Directory Group Policy objects

Remove old logon scripts (optional)

Windows SBS 2003 uses logon scripts for tasks such as installing software and customizing desktops. In Windows SBS 2011 Essentials, the Windows SBS 2003 logon scripts are replaced with a combination of logon scripts and Group Policy objects.

To remove the Windows SBS 2003 logon scripts

1. Click Start, click Administrative Tools, click Active Directory Users and Computers, and then click Users.

2. Right-click a user name, then click Profile.

3. Delete the contents of the Logon script text box, then click OK.

4. Repeat the previous two steps for each user.

Remove legacy Active Directory Group Policy objects (optional)

The Group Policy objects (GPOs) are updated for Windows SBS 2011 Essentials. They are a superset of the Windows SBS 2003 GPOs. For Windows SBS 2011 Essentials, a number of the Windows SBS 2003 GPOs and Windows Management Instrumentation (WMI) filters have to be manually deleted to prevent conflicts with the Windows SBS 2011 Essentials GPOs and WMI filters.

To remove old Group Policy objects from Windows SBS 2003

1. Log on to the Source Server with an administrator account.

2. Click Start, and then click Server Management.

3. In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest:<YourDomainName>.

4. Click Domains, click <YourDomainName>, and then click Group Policy Objects.

5. Right-click Small Business Server Auditing Policy, click Delete, and then click OK.

6. Repeat step 5 to delete the following GPOs that apply to your network:

   • Small Business Server Client Computer

   • Small Business Server Domain Password Policy

     We recommend you configure the password policy in Windows SBS 2011 Essentials to enforce strong passwords. To configure the password policy, use the Dashboard, which writes the configuration to the default domain policy. The password policy configuration is not written to the Small Business Server Domain Password Policy object, like it was in Windows SBS 2003.

   • Small Business Server Internet Connection Firewall

   • Small Business Server Lockout Policy

   • Small Business Server Remote Assistance Policy

   • Small Business Server Windows Firewall

   • Small Business Server Windows Vista® Policy

   • Small Business Server Update Services Client Computer Policy

     This GPO will be present if you are migrating from Windows SBS 2003 R2.

   • Small Business Server Update Services Common Settings Policy

     This GPO will be present if you are migrating from Windows SBS 2003 R2.

   • Small Business Server Update Services Server Computer Policy

     This GPO will be present if you are migrating from Windows SBS 2003 R2.

7. Confirm that all of the GPOs are deleted.

To remove WMI filters from Windows SBS 2003

1. Log on to the Source Server with an administrator account.

2. Click Start, and then click Server Management.

3. In the navigation pane, click Advanced Management, click Group Policy Management, and then click Forest:<YourNetworkDomainName>

4. Click Domains, click <YourNetworkDomainName>, and then click WMI Filters.

5. Right-click PostSP2, click Delete, and then click Yes.

6. Right-click PreSP2, click Delete, and then click Yes.

7. Right-click Vista, click Delete, and then click Yes.

8. Confirm that these three WMI filters are deleted.

Map permitted computers to user accounts

In Windows SBS 2003, if a user connects to Remote Web Access, all the computers in the network are displayed. This may include computers that the user does not have access rights to. In Windows SBS 2011 Essentials, a user must be explicitly assigned to a computer for it to be displayed in Remote Web Access. Each user account that is migrated from Windows SBS 2003 must be mapped to one or more computers.

To map user accounts to computers

1. Open the Windows SBS 2011 Essentials Dashboard.

2. In the navigation bar, click Users.

3. In the list of user accounts, right-click a user account, and then click View the Account Properties.

4. Click the Remote Web Access tab, click Allow Remote Web Access, and show selected links in Remote Web Access.

5. Click Shared Folders, click Computers, click Home page, and then click Apply.

6. Click the Computer Access tab, and click the name of the computer to which you want to allow access.

7. Repeat steps 3, 4, 5, and 6 for each user account.

After you have mapped user accounts to client computers, you can set a default computer to be used for remote access. In the Dashboard, click the Remote Access tab. In User Account Properties, set a default client computer for each user who needs to access the network remotely.

Next topic: Demote and remove the Source Server from the new Windows SBS 2011 Essentials network

Previous topic: Join computers to the new Windows SBS 2011 Essentials network