Resolution
What is the difference between the 'Migrate Computers' wizard and the 'Translate Security Settings' wizard when translating security?
fact
Domain Migration Administrator 7.1
fix
Translating security with the "Migrate Computers' wizard or translating security with the ?Translate Security Settings? wizard produces the same ACL results.
When you go through the "Translate Security Setting" wizard and choose particular computers, the end result for the selected computers will be the same as if you had migrated the computer with the "Migrate Computers" wizard and then translated security on its objects (files and folders, local groups, printers, registry, etc.). The translation of security does not have to be done twice; in other words, you don't have to translate security with the "Translate Security Settings" wizard on all your workstations after you have migrated them with the "Migrate Computers" wizard. This is true for wizards at both the global level and at the project level.
We recommend the following procedure as a best practice:
- Migrate users with the 'Migrate User Accounts' wizard.
- Migrate groups with the 'Migrate Groups' wizard.
- Translate Security on your source domain resources (usually file, print, and application servers) using the 'Translate Security Settings' wizard.
- Migrate computers that need to join the new domain (usually workstations) using the 'Migrate Computers' wizard, and translate security on them (through the wizard selections) as you migrate them.
note
Please keep in mind that if the computers are from a different source domain than the user accounts (Accounts/Resource domain environment), you will have to use the Translate Security Settings wizard rather than translating security during the computer migration.
note
For more information about translating security settings and how this fits into the migration, please review 'Understanding Access and Security Issues', steps 11 - 14 of the 'Workflow' section of the DMA 7.1 User Guide.