User migration

With ADManager Plus, you can migrate user accounts across domains in the trusted forest using GUI-based actions. You can perform migration operation using the native ADMT or from ADManager Plus directly. When a user account is migrated, all the corresponding attributes, along with the password and SID History attribute, are also migrated. Additionally, the domain and domain controller user rights are also updated for the migrated users.

Note: Inter-forest migration is only supported with the Migrate using ADMT option.

Steps to migrate users from ADManager Plus console

1. Log in to ADManager Plus and navigate to the Management tab.
2. In the left pane, click Migration.
3. Under Migration, click User Migration.
4. Under Source Settings, specify the Source Domain from the drop-down menu and select the list of users to be migrated using the respective checkboxes.
5. Under Target Settings, specify the Target Domain from the drop-down menu, select the Target OU using the radio button, then click OK.
6. Under OU Option, choose one of the following:
• Migrate objects directly to the selected Target OU as a flat list: This option migrates the user as it is into the selected target OU.
• Migrate objects along with their OU hierarchy to the selected Target OU: This option migrates the user along with the OU the user is a part of in the source to the target domain.
7. Under Conflict Handling, select one of the following options to avoid any duplication during migration.
• Apply this Naming Format: Select the naming format to be used while migrating the user from the drop-down. Click Advanced Settings to specify the order in which naming formats must be applied.
• You have the option to either append or increment the suffix of the user's conflicted attribute value.

Note: If you choose append, click Advanced settings to specify the suffix length and the characters to fill the length deficit.

• Do not migrate if conflict is detected: Choose this option if you prefer not to migrate the duplicate user.
8. Enter or select the domain suffix for the user being migrated in Domain Suffix of UPNs. For example, if the user's User Principal Name (UPN) is johndoe@domain1.com, it will change to johndoe@domain2.com when domain2.com is entered as the suffix or selected from the drop-down menu.
9. In Password Handling, select the desired password type for the user being migrated from the drop-down menu.
• Copy Password: The same password will be copied from the source.
• Random Password: A random password will be generated as per the configured password policy.

Note: This is the only option available for inter-forest migration. By default, ADMT stores new complex passwords that are created in the default drive in the Program Files\Active Directory MigrationTool\Logs\Password.txt file.

• Type a Password: Type a desired password.
• Same as User Logon Name: The user logon name will be set as the password.
10. You have two options for migration:
• If you wish to migrate using ADManager Plus directly, uncheck the Migrate Using ADMT box. If you want the migrated users to match the users' rights from the source domain, check the Update user rights box.
• If you wish to migrate using ADMT, check the Migrate Using ADMT box.
Note:
• If option b is selected, ADManager Plus should be configured in the domain controller's source or target domain where ADMT is also installed.
• The Associated Accounts tab will not be displayed when using the Migrate Using ADMT option, as the ADMT tool will autonomously handle the migration of all associated accounts.

You can make the following User Option changes, under More Options:

• Update user rights: Sets the rights from the source domain to the migrated users.
• Translate roaming profiles: Copies the roaming profiles from the source to target domains.
• Fix user's group memberships: Adds the migrated user accounts to target domain groups if those users are group members in the source domain.
• Migrate associated user groups: Creates groups associated with the user being migrated accounts and maintains group membership in the target domain.
• Update previously migrated objects: Associates group memberships even for those groups that have been migrated previously.
11. Click Preview to view and edit the list of conflicts, selected users, and associated accounts, then click Review to view the final migration list.
12. Click Migrate Now to migrate the selected accounts.