But that's what the migration join does now. You install SBS 2008 in
"migration mode" ... basically you set up the answer file and have the
new server see the old server and it joins the new server to the domain,
the domain replication replicates across the usernames and computers as
part of the process.
These tools are available already to extract out information and import
it back in. But even if you do that you haven't migrated across the
SIDs of the computer. If you change the SIDs (security identifiers of
the computers), you'll break the domain join and have a boatload of
errors in your event log.
Using LDIFDE to import and export directory objects to Active Directory:
http://support. <http://support. microsoft. com/kb/237677>
microsoft.com/ kb/237677 <http://support.
<http://support. microsoft. com/kb/237677> microsoft.com/ kb/237677>
The best way to migrate is exactly what the SBS migration process is
doing. Take a new server, join the domain, let the AD information
replicate across.
It's just flat out a lot of work to rip out a fully functioning network
and replace a server. There's no short cuts here. I've said this for
several years about active directory.. I love the glue of the active
directory, but at the same time, that glue means that it's not as easy
as moving a workgroup would be.