AD Migration tools

[Chuckles]

Does anyone know of any tools that will copy user accounts from one domain to another (totally different forest)

cheers!

[Daz]

ADMT (http://www.microsoft.com/downloads/details.aspx?FamilyID=ae279d01-7dca-413c-a9d2-b42dfb746059&displaylang=en) :)

The Active Directory Migration Tool version 3.1 (ADMT v3.1) simplifies the process of migrating objects and restructuring tasks in an Active Directory® Domain Service (AD DS) environment. You can use ADMT v3.1 to migrate users, groups, and computers between AD DS domains in different forests (inter-forest migration) or between AD DS domains in the same forest (intra-forest migration). ADMT can also perform security translation (to migrate local user profiles) when performing inter-forest migrations.

[edit]Couple of other useful links here:
http://blogs.technet.com/askds/archive/2008/07/10/admt-3-1-released.aspx

[Chuckles]

Cheers Daz, I've downloaded the 3.0 version as its 2003 not 2008 but it looks just the ticket!

[Daz]

Sorry, didn't realise the update was 2008 only :$ Thought they'd just added '08 support. Nay mind!

[Chuckles]

Works ace!! Cheers fella.

Only thing it doesn't seem to copy is the employee number for some reason, which we use to reconcile AD accounts with payroll files.

[Daz]

If you're ok with VB and LDAP it wouldn't be hard to write a little thing to copy the attribute between the domains - you've already done the hard work in terms of SID's and passwords.

[Chuckles]

Yeah I'll script it in and out from a text file. Thanks again.

[Davey_Pitch]

Does the utility copy over passwords as well? I've exported and imported user data from AD before, but not using anything that took passwords with it.

[Chuckles]

It does provided the source DC has a local encryption key installed.