How to Move Active Directory Users and Computers from one Domain to another
In Active Directory, users and computers can be moved or migrated from one domain to another for various purposes. In intra-forest migration, objects are migrated between domains within the same forest. In inter-forest migration, objects are migrated between domains located across different forests.
Migration of objects can be done for several purposes such as mergers, where a large number of users spread across several domains can be migrated to a single domain. However, the settings of these objects have to be preserved. Users and computers can be moved to a new domain using one of the following methods.
- Active Directory Migration Tool (ADMT)
- PowerShell scripts
Using ADMT for migrating users and computers to a new domain
The Active Directory Migration Tool (ADMT) is a Microsoft application that can be used for moving Active Directory objects such as users, computers and groups between different domains and forests. This can be either intra-forest or inter-forest migration. Besides migration, ADMT can also be used to perform functions such as merging domains, changing the domain names, and optimizing the arrangement of objects within the Active Directory structure.
How to Install Active Directory Migration Tool (ADMT)
The following requirements should be met in order to install the Active Directory Management Tool (ADMT).
Windows Server 2008 or later versions. ADMT does not work on read-only domain controllers or computers that are part of a server core configuration.
The source and target domains should run on the supported Windows Server versions. An SQL server database to store data is required. Once the prerequisites have been met, ADMT can be installed by following the instructions given below.
- Download the Active Directory Migration Tool from Microsoft. In the downloaded folder, double click on admtsetup32.exe.
- Click Next after reading the instructions and accept the Terms and Conditions.
- Select the appropriate option if you want to be part of the Customer Experience Improvement Plan and click Next.
- In the next dialog box, enter the SQL server to be used for ADMT and click Next.
- Click Finish once the installation is complete.
How to Migrate Users and Computers using ADMT
In intra-forest migration, both the source and destination domains are located within the same forest. For migrating a limited number of objects such as users and computers using ADMT, follow the step-by-step procedure given as follows.
- Login to the target or parent domain using the ADMT credentials.
- Open Active Directory Migration Tool (ADMT) and select Action > User Account Migration Wizard and click on the Next button.
- Select the Source and Target domains and click Next.
- Choose the Select users from the domain option.
- In the next dialog box, click on Add and select the users to be migrated and click OK.
- Check if the selected user accounts are displayed in the main window and click Next.
- Select the target Organizational Unit (OU) and click Next.
- Check the Translate roaming profiles and Update user rights checkboxes and click Next after ignoring the warnings.
- In the Conflict Resolution dialog box, select the “do not migrate source object if a conflict is detected in the domain” option and click Next.
- Finally, check the details and click Finish. Wait for the process to get completed and check for errors and the migration summary. Open the target domain and check if the selected users have been migrated.
As a best practice, a migration checklist has to be maintained before migrating objects.
How to Migrate Users and Computers using PowerShell
An Active Directory Object such as a user or computer can be moved into another container or domain using the following PowerShell cmdlets.
To move an object to a new location using the following cmdlet.