Migration requirements

Listed below are the requirements for the objects to be migrated, the computer on which to install Active Directory Migration Tool, and any computer to which an Active Directory Migration Tool agent will be dispatched.

Source objects

Objects to be migrated must meet the following criteria:

• Source objects must be of one of the following types:
  • User account
  • Security-enabled group including: local group (for Windows NT, only a domain controller's shared local groups can be migrated); domain local group (available only in a Windows 2000 domain operating in native mode); global group.
  • Computer account
• Source objects cannot be a built-in account (such as local Administrators, Users, and Power Users). Built-in account Security IDs (SIDs) are identical in every domain, so adding them to a SID History would violate the SID-uniqueness requirement of the forest.
• The SIDs of the source objects must not already exist in the target forest, either as primary account SIDs or in the SID History of an account.

Active Directory Migration Tool

Active Directory Migration Tool should be installed only on Windows 2000 domain controllers in target domains. Using Terminal Server, Active Directory Migration Tool can be run from any computer.

Make sure that the computer on which Active Directory Migration Tool is installed meets the following requirements:

• Pentium II or later central processing unit (CPU).
• Enough memory to accommodate the migration process. The minimum amount of available RAM is 10 megabytes (MB), plus 4 kilobytes for each user to be migrated.
• A hard disk partition with at least 35 MB of free space: 7 MB for Active Directory Migration Tool installation and 25 MB for data and log files.

Active Directory Migration Tool agent

The Active Directory Migration Tool agent can operate on computers running the following operating systems:

• Windows NT 3.51 with Service Pack 5 (both Intel and Alpha-based computers)
• Windows NT 4.0 with Service Pack 4 or later (both Intel and Alpha-based computers)
• Windows 2000

Computers on which the Active Directory Migration Tool agent will operate must meet the following requirements:

• A hard disk partition with at least 15 MB of free disk space for the agent and agent log files.
• The ADMIN$ share must exist on computers running Windows 3.51 for the agent to install successfully.
• Active Directory Migration Tool user must be logged on with a user account that has Administrator or equivalent permissions on the target computer. Note that the built-in Administrators group normally contains the Domain Administrators group from the computer's domain.
• Remote registry access must be enabled. For information on how to enable or disable remote registry access, see the Microsoft Web site (http://www.microsoft.com/).
• NetBIOS should be enabled.
• The (NetBIOS) Server service should be running.
• The target computer must be a valid member of a valid domain. Note that some computers may have expired passwords, for example, the computer may have been disconnected from the domain for some time and its computer password has expired.