"Migration from Windows NT to Windows 2000 : A hands on approach"

1. "Migration from Windows NT to Windows 2000 : A hands on approach" Presented by: Mr. Apresh Singh of Fiji National Training Council

2. Why Migrate to Win 2000 ? • Multiple options in deploying servers • Increase Business Value • Reliability • Performance • Manageable & Scalable • Ready to use the Globe’s largest network – The Internet Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

3. Objectives of this Presentation • Key points in the migration process: • Selecting the method of migration • Selecting an appropriate Design Strategy for migration • Some ideas shared on the planning process and implications involved • Share experiences on the actual process of Migration Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

4. Developing a Migration Strategy – the phases • Design then required Active Directory forest • Select an appropriate Migration Path • Develop a domain a strategy – Restructure or Upgrade ? • Actual deployment of the Migration Strategy developed Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

5. Selecting the Migration Path-what’s in it ? • Identify existing Domain environment • Single/multiple, resource domains etc • Document the current Network environment • DNS, File, Print & Web services, Network infrastructure, Data, H/W, S/W inventories, Business Apps & Security • Define goals of migration – prioritize migration goals • Examine Active Directory design – determines migrations project’s end goal, the ideal domain infrastructure for an organization. Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

6. Selecting the Migration Path-what’s in it ? (continued) • Determine possible migration paths – comparing goals, thus selecting the best path • Evaluate Upgrade/Re-structure Decision points • Documenting the entire process of Migration. Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

7. Developing Goals – mapping Business goals to Migration goals Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

8. Determining Possible Paths in Migration • Organizations can choose to migrate to the Active Directory infrastructure in one of the ways specified: • Domain Upgrade – current domain model is satisfactorily • Domain Upgrade & then Re-Structure – get rid of redundant resource domains, centralized user account domain etc • Domain Re-Structure – re-define domain structures in part or full then perform migration depending on migration & AD goals. Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

9. Understanding Domain Security • Users, groups, computers are identified via Domain Specific Security Identifiers (SIDS) • Discretionary Access Control List (DACL) used by administrators to define access permissions to resources • Thus when a user attempts to access a resource, his access token together with the type of access requested is compared with the SIDs in the DACL of the resource being requested by user. Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

10. Inter Forest Restructuring • Copying accounts from a NT domain to Win 2K domain (Fall back possible) • Or copying accounts from a Win 2K domain in a Forest to another Win 2K domain in another Forest (No Fallback) • “Prune & Graft” method !! Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

11. Inter Forest Restructuring-Implications • Advantageous !! – does not disrupt existing production environment • Maintains the ability to fall back to the source account from production environment, if necessary, until target domain is decommissioned • NOTE: Cloning/Copying of accounts is only possible between different Domains - Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

12. Intra Forest Restructuring • Moving security principals between 2 domains, in the same AD Forest. • Common in 2 phased migration – migrate & re-structure • Change in Business needs e.g Merger of 2 or more 3 depts. • Move of user accts in case of employee dept./site change • NOTE: No fall back in this case as security principles (accts etc) are Moved Not Copied Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

13. Domain Restructure Tools Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

14. Domain Restructure Recovery Plan • Prevents accidental data loss in during restructure • Maintaining source domain gives certain degree of recovery • Though fall back is NOT possible: • Intra-forest restructures • Inter-forest restructures (btwn 2K) • Mirror images works well !! Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

15. Brain Teaser ! Who’s Who ! Picture above, shows 6 cool friends. Using the pic & clues below, figure out each person’s name ! • Sam is between two girls. • Gayle is the only person wearing a hat. • There are two people between Gayle and Maria. • Sam is standing next to Maria. • Gina is standing on one of the ends. • There is one person between Michael and Lucy Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

16. Practical Scenarios • The IT management of a multinational oil company has determined that the support and maintenance of the current network is time consuming and costly, and that several million dollars can be saved each year by standardizing on the Windows 2000 network platform and simplifying the domain environment. The existing Windows NT 4.0 domain model consists of 8,000 user accounts dispersed among more than 30 departmental and branch office domains joined together with a complex web of trusts. • What are the key decision points for selecting a migration path in this scenario? • Reducing the cost and administrative overhead of the current model. • Reducing maintenance of the domains. • Reducing the complexity of the existing domain model. • What migration path best suits this company's needs? Why? • Restructuring reduces the number of domains and trusts. • Restructuring simplifies network manageability. • Restructuring allows cost savings. Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

17. FNTC Scenario HQ NAMAKA SUVA NABUA Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

18. FNTC Scenario – after Re-Structure NAMAKA HQ NABUA SUVA Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

19. SUMMARY - Planning to Deploy a Migration Strategy • Create a Project Plan • Clearly defined migration vision & scope • Identify personnel requirements & organize teams with functional specifications • Select installation strategy • Automated new Installation of Win 2K Server • Automated upgrade to Win 2K Server • Have test environment (if necessary) Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

20. SUMMARY-Planning to Deploy a Migration Strategy (continued) • Plan a smooth Transition to Win 2000 • Phase your migration efforts • Create a backup/recovery plan • Provide appropriate training • Keeping teams informed • Scheduling major migration activities & around business operations. Apresh Singh [apresh_s@fntc.ac.fj] (BSc.)(MCP+I,MCSE,A+,N+)(AACS)

21. Questions/Discussions Thank You