1

Hello, and please forgive me any misuse of terminology. I’m still fairly new to the server side of things. :slight_smile:

As far as I understand things, at my new job, we have one domain, and then 3 forests (subdomains??) underneath it. Everything is 2003. Users were created on the server (so either the domain or whichever forest/subdomain) at the site they were closest to.

There were no procedures set for if a user moved to a different site. The account would just continue to live on the original server.

As I am the organization’s first solely dedicated tech, I want to get that straightened out. Get everyone to the proper location, and set a procedure to KEEP it that way.

I’ve read some about the Active Directory Migration Tool, but I wasn’t sure if that IS what I want, as I only want to move select users.

Any opinions or suggestions will be greatly appreciated.

Thanks!!

TA

3 Spice ups
2

TA,

I think you have a lot of work ahead of you. I think what you are trying to say is that you have 1 forest with several domains (I try to think of domains as trees in the forest, keeps it straight for me). I think you’re on the right track with using ADMT tool to move users from one domain to another. I would suggest looking up the docs for ADMT.

3

I guess it’s the several domains part that is confusing me.

We have blah.com

Under that we have

loc1.blah.com

loc2.blah.com

loc3.blah.com

Oh, wait. AD IS telling me they are domains!! Teehee.

Once I get this [insert stream of curse words here] pushout of Symantec Endpoint Protection done, I’ll make friendly with ADMT documentation.

Thanks!

4

TA,

Keep in mind that you can also have each domain can have domains underneath it as well. i.e. sales.loc1.blah.com.

Which version of SEP are you using?

5

11.0.6…

At least until I can get our order number from whoever has it, so I can get us upgraded to 12.

After about a straight week of pounding, I found a forum post on Symantec’s site saying that the .ini file that tells the computer to only install what you tell it to is ignored by group policy, which is how I wanted to push out the install. :: rolls eyes ::

But, that, at least, should be worked out now. Just working on installing old AVs and pushing out the new.

6

We migrated to 11.0.6 from SAV 10 almost a year ago, it was a big difference in how Symantec wants you to manage/deploy your AV through your workstations. We use the SEP manager pretty extensively to manage policies and the clients. I also had to setup different install packages for each of the different types of workstations that we have. SEP on the servers are a different story as well since the install package detects what type of server it is (SQL, EXCHANGE, DC’s) and disables some features.

I push out the install packages through the Migration and Deployment tool that comes with SEP. I found that to be easier than trying GP since the install package for SEP can get pretty large (100MB), and pushing that out through GP would be a nightmare over the WAN to our remote sites.

Good luck.