活动目录的用户迁移
要求:
pc1:
IP:192.168.10.1 DNS:192.168.10.1 wuhao.com
pc2:
IP:192.168.10.2 DNS:192.168.10.1 wuhao2.com
pc3:
IP:192.168.10.3 DNS:192.168.10.3 lxy.com
目的:
将wuhao.com域中的用户wuhao和用户LXY迁移到lxy.com域中
<?xml:namespace prefix = o ns = "urn:schemas-microsoft-com:office:office" />
1,安装活动目录迁移工具ADMT
在微软的官方网站上有下载,目前最新版本是ADMT 3.0。关于ADMT,一路下一步就OK了,不过的安装我这里就不做演示了要注意,要安装在目标域中啊,在本实验中就是安装在lxy
.com中这台DC上。
2,提升林功能级别为windows server 2003模式(全部)
提升林功能级别的目的是为了建立林范围的双向信任关系
1)在DC1上,打开AD用户和计算机,鼠标右键wuhao.com
![](https://s1.51cto.com/attachment/200906/200906231245744000328.jpg)
然后,打开AD域和信任关系,鼠标右键AD域和信任关系
![](https://s1.51cto.com/attachment/200906/200906231245744376578.jpg)
pc2,pc3同上
3,在两个域的DNS上各建立对方域的辅助区域
在DC1上打开DNS,开始-运行里输入dnsmgmt.msc,新建区域-辅助区域
![](https://s1.51cto.com/attachment/200906/200906231245744544828.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245744629625.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245744650250.jpg)
在IP地址里写lxy.com域的DNS服务器的IP地址
然后展开正向查找区域
我们来到DC3上,打开DNS,展开正向查找区域,鼠标右键lxy.com区域
添写wuhao.com域的DNS服务器的IP地址192.168.10.1
![](https://s1.51cto.com/attachment/200906/200906231245744970718.jpg)
然后回到wuhao.com域的DNS中,看看lxy.com区域是否复制过来
![](https://s1.51cto.com/attachment/200906/200906231245745431609.jpg)
同样的在lxy.com域中也创建wuhao.com域的辅助区域,相应的操作一样
4,创建林双向信任
pc3上创建林范围的双向信任关系
lxy.com右键属性---信任
![](https://s1.51cto.com/attachment/200906/200906231245745022625.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245745884671.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245745916375.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245745998062.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245746010734.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245746041359.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245746092875.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245746205843.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245746233421.jpg)
![](https://s1.51cto.com/attachment/200906/200906231245746259265.jpg)
一直点下一步
![](https://s1.51cto.com/attachment/200906/200906231245746341109.jpg)
完成双向信任
转载于:https://blog.51cto.com/wuhao0320/169192