[Samba] Migrating from samba to win 2k3 pdc

[Ross McInnes]

 Many thanks for this, will stop me having to mess around with cut etc
getting usernames and such out :)

Im not too worried about workstations as they are all being rebuilt, its
still mostly the passwords. My "get around" is that they really only need it
for webmail, so what I will do is hold off AD'ing the webmail machine and
copy the  passwd/shaddow files across to the webmail box. Then when they all
come back and change their passwords, change it to use AD authentication.

Such a pain :/ Still. Life goes on :)

Cheers

Ross

-----Original Message-----
From: Jonathan Johnson [mailto:jon at sutinen.com] 
Sent: 09 August 2005 19:22
To: Ross McInnes
Cc: samba at lists.samba.org
Subject: Re: [Samba] Migrating from samba to win 2k3 pdc

I've used Microsoft's Active Directory Migration Tool with reasonably good
success to migrate user and machine accounts from Samba to ADS. 
ADMT is able to retrieve the passwords from a Windows NT domain, but to my
knowledge, NOT from a Samba domain. ADMT is on your Windows 2K3 CD.

Some gotchas with regard to migration of workstations:

1) The local Administrator password on the workstations (and the
Administrator password on the old domain) MUST be the same as the
Administrator password on the new domain

2) Do not have users logged into the computer when migrating workstations

3) On the workstation, make sure there is no "DNS Suffix" specified

4) There is something else but I can't remember it off the top of my head.
Search the archives -- I've posted on this before.

--Jonathan Johnson


Ross McInnes wrote:

>Yes I know it's a bad thing, but due to several issues I am moving from 
>a samba pdc to a windows 2k3 pdc
>
>But, im keeping samba as the file store, ive sorted it so that samba 
>will talk to the w2k3 pdc and auth using winbindd etc that's nps.
>
>But, I need to get the users and passwords off the linux/samba server 
>and onto the w2k3 server...
>
>Any ideas? Password crackers/hax methods accepted!
>
>Either that or it's a reset over 2000 users passwords job (my poor 
>fingers)
>
>Many thanks
>
>Ross
>
>  
>