Move settings and data to the Destination Server for Windows SBS 2011 Standard migration

Published: January 28, 2011

Updated: January 28, 2011

Applies To: Windows Small Business Server 2011 Standard

After Windows SBS 2011 Standard is installed, you must run the Migration Wizard to migrate settings and data from the Source Server to the Destination Server. You can use the Migration Wizard only if the Source Server is running Windows SBS 2003, Windows SBS 2008, or Windows SBS 2011 Standard. You may, however, review the migration process for information about which data you should migrate, and then use the instructions that apply to your environment.

Some tasks in the Migration Wizard are required, and some are optional. You must complete the required tasks in the order that they are listed in the Migration Wizard. You can skip optional tasks or complete them at a more convenient time, such as when no users are logged on to the network.

You have 21 days from the time that you finish installing Windows SBS 2011 Standard to complete the migration. You may exit the wizard at any time and return later to finish it. To exit the Migration Wizard, click Cancel. When you restart the wizard, it opens to the Migration Wizard Home page, and you can start the next available migration task.

Note

  • All Windows SBS 2003 users, security groups and distribution lists are migrated during the initial migration of AD DS, and they are usable immediately. However, the migrated users, security groups, and distribution lists are not automatically displayed in the Windows SBS 2011 Standard Console. For information about how to make these items appear in the Windows SBS 2011 Standard Console, see Move user accounts and groups for Windows SBS 2011 Standard migration.

  • By default, the Windows SBS 2011 Standard password policy is configured to require strong passwords. If you did not enforce strong passwords on the Source Server, you must reset user accounts that migrated with weak passwords to meet the new password policy. However, you can change the default Windows SBS 2011 Standard password policy through the Password Policies dialog box in the Windows SBS 2011 Standard Console.

  • Run the Migration Wizard

    Note

    The Migration Wizard centralizes the migration tasks and guides you through the migration process. While some of the migration tasks can be run automatically, there are other tasks that you need to run manually. For manual tasks, the Migration Wizard provides links to step-by-step instructions.

    To run the Migration Wizard

    1. On the Home page in the Windows SBS 2011 Standard Console, in Getting Started Tasks, click Migrate to Windows SBS.

    Important

    Due to security concerns, you are not allowed to use the built-in Administrator domain account to launch the Migration Wizard. Use a domain administrator account other than Administrator to log in. If you do not have a second domain administrator account, create one in the Windows SBS 2011 Standard Console.

    1. On the Welcome page, read the information, and then click Next to start migrating data and settings from the Source Server to the Destination Server. The Migration Wizard Home page appears.

    2. Click Next to start the first migration task. The following procedures provide detailed information about how to perform the migration:

      1. Change the data storage location on the Destination Server

      2. Configure the network

      3. Configure the Internet address

    Important

    Outlook Web Access (OWA) is not available for mobile users after the Internet Address Management Wizard finishes and before you finish migrating Exchange Server mailboxes and settings to the Destination Server. The Internet Address Management Wizard will point the OWA URL to the Destination Server, and the Source Server can no longer serve requests to https://YourNetworkDomainName.com/owa. We recommend that you notify your users before this change occurs and that you finish the steps in Move Exchange Server mailboxes and settings for Windows SBS 2011 Standard migration as soon as possible.

    4.  Move network settings
    
    5.  Move certificates
    
    6.  [Move Exchange Server mailboxes and settings for Windows SBS 2011 Standard migration](gg563803\(v=ws.11\).md)
    
    7.  [Remove legacy Active Directory Group Policy objects and logon settings for Windows SBS 2011 Standard migration](gg563794\(v=ws.11\).md)
    
    8.  [Move users' shared data for Windows SBS 2011 Standard migration](gg563797\(v=ws.11\).md)
    
    9.  [Move the internal website for Windows SBS 2011 Standard migration](gg563792\(v=ws.11\).md)
    
    10. [Move fax data for Windows SBS 2011 Standard migration](gg563809\(v=ws.11\).md)
    
    11. [Move user accounts and groups for Windows SBS 2011 Standard migration](gg563796\(v=ws.11\).md)
    
    12. [Enable folder redirection on the Destination Server for Windows SBS 2011 Standard migration](gg563795\(v=ws.11\).md)
    
    13. [Move Terminal Services Licensing Server for Windows SBS 2011 Standard migration](gg563793\(v=ws.11\).md)
    

    Important

    The Migration Wizard does not include a task for migrating a Terminal Services license server. If the Source Server is acting as a Terminal Services license server, you must migrate the Terminal Services license server role before you decommission the Source Server. We recommend that you migrate the Terminal Services license server role before you finish the Migration Wizard to ensure that it is migrated before the end of the 21 day migration grace period.

    14. Move SQL Server data
    

    Important

    This is an optional task. The Migration Wizard does not include a task for migrating SQL Server data. If you have line-of-business (LOB) applications that store data in a SQL Server database, you must use the procedures that are provided by your LOB-application provider to migrate the data before you decommission the Source Server. We recommend that you migrate the SQL Server data before you finish the Migration Wizard to ensure that the SQL Server data is migrated before the end of the 21 day migration grace period.

    15. [Finish Windows SBS 2011 Standard migration](gg563804\(v=ws.11\).md)
    

    Change the data storage location on the Destination Server

    Note

    This task is optional.

    If you plan to change the data storage location on the Destination Server, or to store data on a separate data server, perform this task before you migrate data from the Source Server. When you choose a new location for the data, consider the storage requirements for the mailboxes and the shared folders that you want to migrate.

    To change the data storage location

    1. On the Migration Wizard Home page, click Change where to store data on the Destination Server, and then click Next.

    2. If you do not want to change where to store data at this time, click Skip this task, and then click Next.

    3. If you want to change where to store data, click each data type to start the Move Data Folders Wizard, and then follow the instructions in the wizard.

    4. When you finish changing where to store data, return to the Migration Wizard, click Task Complete, and then click Next.

    Configure the network

    Note

    This is a required task.

    To configure the network

    1. In the Migration Wizard, on the Migration Wizard Home page, click Next.

    2. Click Start the Connect to the Internet Wizard. For information about how to complete the Connect to the Internet Wizard, see Connecting to the Internet.

    3. When the wizard finishes, you are returned to the Migration Wizard Home page, and the task is marked Completed.

    Configure the Internet address

    Note

    This is a required task.

    Important

    OWA is not available for mobile users after you finish the Internet Address Management Wizard and before you finish migrating Exchange Server mailboxes and settings to the Destination Server. The Internet Address Management Wizard will point the OWA URL to the Destination Server, and the Source Server can no longer serve requests to https://YourNetworkDomainName.com/owa. We recommend that you notify your users before this change occurs and that you finish the steps in Move Exchange Server mailboxes and settings for Windows SBS 2011 Standard migration as soon as possible.

    To configure the Internet address

    1. Start the Migration Wizard.

    2. On the Migration Wizard Home page, click Configure the Internet address, and then click Next.

    3. On the Configure Internet address page, click Start the Internet Address Management Wizard.

    4. Complete the Internet Address Management Wizard.

    5. When the wizard finishes, click Task Complete on the Configure the Internet address page, and then click Next. The task is marked Completed on the Migration Wizard Home page.

    If your router does not support the UPnP framework, or if the UPnP framework is disabled, there may be a yellow warning icon next to the router name. Ensure that the following ports are open and that they are directed to the IP address of the Destination Server:

    • Port 25: SMTP email

    • Port 80: HTTP Web traffic

    • Port 443: HTTPS Web traffic

    • Port 987: HTTPS Web traffic for Windows SharePoint Services through Remote Web Access.

    • Port 1723: VPN if you plan to enable VPN on the Destination Server. You may also need to enable the point-to-point tunneling protocol (PPTP) pass-through on your router.

    Move network settings

    Note

    This is an optional task.

    To migrate network settings

    1. On the Migration Wizard Home page, click Migrate network settings, and then click Next. If you do not want to migrate the network settings to the Destination Server or if you want to skip the task for now, click Skip Task on the Migrate network settings page, and then click Next. The task is marked Skipped on the Migration Wizard Home page.

    2. If you want to migrate the network settings to the Destination Server, on the Migrate network settings page, click Launch the DNS Forwarders Migration Task.

    3. When the DNS forwarders are successfully migrated, a message is displayed. Click OK. You are returned to the Migrate network settings page.

    4. If you want to migrate the Mobile Users group, on the Migrate network settings page, click Launch the Mobile Users Group Migration Task.

    5. When the Mobile Users group is successfully migrated, a message displays. Click OK. You are returned to the Migrate network settings page.

    6. To migrate certificates, see Move certificates for Windows SBS 2011 Standard migration.

    7. When you finish migrating the network settings, click Task Complete on the Migrate network settings page, and then click Next. The task is marked Completed on the Migration Wizard Home page.

    Note

    If you have special network settings configured on the Source Server such as site-to-site VPN, you should review those settings to see if they should be applied to the Destination Server.

    Move certificates

    Self-issued certificates

    Migrating self-issued certificates is not supported. Users must transfer the Certificate Distribution Package in the new server to removable media, and then they must re-install the self-issued certificates on the remote computers that are not joined to the domain.

    Trusted certificates

    If you purchased a trusted certificate, and it is available to export, you can move the certificate to Windows SBS 2011 Standard. To move a certificate, use the following procedures to export it from the Source Server, import it to the Destination Server, and then run the Add a Trusted Certificate Wizard to connect the certificate to Remote Web Access.

    To export a trusted certificate from the Source Server

    1. On the Source Server, click Start, click Run, type mmc.exe, and then press ENTER.

    2. On the console, click File, and then click Add/Remove Snap-in.

    3. Click Add, choose Certificates from the list, click Add, and then click OK.

    4. In the pop-up window that appears, click Computer Account, click Finish, and then click OK.

    5. Expand Certificates, expand Personal, and then click Certificates.

    6. Right-click the certificate that is issued to your website (for example: remote.contoso.com), click All Tasks, and then click Export.

    Note

    There may be multiple certificates with the same name. Ensure that you choose a certificate that has a valid expiration date and that was issued by a trusted authority. If you are not sure which certificate to use, open Internet Information Services (IIS), determine which certificate IIS is using on the Source Server, and then choose the same certificate.

    1. In the Certificate Export Wizard, click Next.

    2. Ensure Yes, export the private key is selected, and then click Next.

    3. Ensure Include all certificates in the certificate path if possible and Export all extended properties are selected, and then click Next. Do not select Delete the private key if the export is successful.

    4. Type a password to protect the certificate file, and then click Next.

    5. Choose a location to save the .pfx file (for example, C:\trustedcert.pfx), and then click Next.

    6. Finish the wizard.

    To import the trusted certificate to the Destination Server

    1. Move the trustedcert.pfx file to the Destination Server by using the network or a USB flash drive.

    2. On the Destination Server, click Start, type mmc.exe, and then press ENTER.

    3. On the console, click File, and then click Add/Remove Snap-in.

    4. Choose Certificates from the list, and then click Add.

    5. In the pop-up window that appears, select Computer Account, click Finish, and then click OK.

    6. Expand Certificates, expand Personal, and then click Certificates.

    7. Right-click Certificates, click All Tasks, and then click Import.

    8. On the Certificate Import Wizard Welcome page, click Next.

    9. Browse to the location of the saved .pfx file, and then click Next.

    10. Type the password that you typed in the Export procedure, ensure that Mark this key as exportable and Include all extended properties are selected, and then click Next.

    11. Ensure that the certificate is imported to the Personal folder, and then click Next.

    12. Finish the wizard.

    To ensure that the Destination Server is using the newly imported certificate, run the Add a Trusted Certificate Wizard:

    To run the Add a Trusted Certificate Wizard

    1. Open the Windows SBS 2011 Standard Console.

    2. On the navigation bar, click the Network tab, and then click Connectivity.

    3. In the task pane, click Add a trusted certificate.

    4. On the Welcome page, read the information, and then click Next.

    5. On the Get the certificate page, click I want to use a certificate that is already installed on the server, and then click Next.

    6. On the Choose an installed certificate page, click the certificate that you just imported, and then click Next.

    Note

    If you cannot find the certificate that you just imported in the previous step, double-check whether the Internet address that is configured on the Destination Server is exactly the same as the one on the Source Server.

    1. When the wizard finishes, click Finish.

    2. We recommend that you upgrade to a 2048-bit certificate if you were using a 1024-bit certificate.