Active Directory Migration Tool

So you've decided to consolidate your forest and use fewer domains. This requires that you move objects from your old, obsolete domains, to their new domain. Microsoft provides the Active Directory Migration Tool (ADMT) specifically for this purpose. This can be used to move objects between domains in the same forest, different forests, or from NT 4.0 domains. ADMT version 3.0 can be downloaded here.

I also recommend downloading the ADMT 3.0 migration guide, which you can find here. This gives detailed directions on how to use the ADMT and some strategies for what order to move objects. This document is almost 300 pages, so it covers several different migration scenarios.

This information pertains to the following courses:

Course 2279:Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Active Directory - Directory Services Restore Mode password

Certain tasks in Active Directory require that you start the domain controller without Active Directory running. These include restoring the database from backup, moving the database, and performing an offline defragmentation of the database. When you start the domain controller and Active Directory is not running, you must log on as the Directory Services Restore Mode (DSRM) account. The password for this account is set when you install Active Directory. The problem is, many people set this password weeks or months ago, and when it comes time to use it, they can't remember what it is. Does this sound familiar? If it does, you can set this password from the command line using NTDSUTIL. The syntax for setting the DSRM password can be found here (Click on "Set DSRM password").

This information pertains to the following courses:

Course 2279:Planning, Implementing, and Maintaining a Microsoft Windows Server 2003 Active Directory Infrastructure

Event Log Backup Script

The Windows Script Center script repository has several scripts that can be used to work with event logs. Here is a link to a sample script that will back up and then clear the log. The sample shown here uses the Application Log. You will have to modify the script if you want to backup the other logs.

BitLocker

Windows Vista comes with support for a new security feature called BitLocker. BitLocker ensures that data on a computer is encrypted if the operating system is not running. In order to use BitLocker, Vista must be installed on a system with a TPM microchip (TPM version 1.2), and TPM must be enabled in the BIOS.

For more information, and step-by-step instructions for using BitLocker, go here.

System Center is coming...

System Center is Microsoft's family of solutions that can help you centrally plan, deploy, manage, and optimize your IT environment. There are several products in the System Center. You can check them out here. Of particular interest are the System Center Operations Manager and the System Center Configuration Manager. The Operations Manager is the new MOM and is now available as RC2. The Configuration Manager is the new SMS and is currently in Beta 2.

This information pertains to the following courses:

• Course 2823: Implementing and Administering Security in a Microsoft Windows Server 2003 Network