What are some of the general Gotchas or Helpful Hints one might want to know when migrating Computer (NETIQKB1138)

goal
What are some of the general Gotchas or Helpful Hints one might want to know when migrating Computer accounts and Translating Security with NetIQ's Domain Migration Administrator (DMA) tool?

fix

When migrating computer accounts:

• Dispatching an agent to the computers you wish to migrate is a large part of the Domain Migration Administrator (DMA) process for migrating machines.  How can you verify what DMA is doing here? See Knowledge Base article:
  • NETIQKB1207: What are the requirements for agents and how do they work?
• From which Domain Controller is DMA drawing its information? See Knowledge Base article:
  • NETIQKB925: Which Domain Controller does Domain Migration Administrator (DMA) enumerate and pull the information from when doing a migration?
• In the computer migration wizard, you must specify another set of credentials, why? See Knowledge Base article:
  • NETIQKB2057: During a computer migration, why do I have to provide an account?
• You should migrate computers in a separate project from users and groups, why? See Knowledge Base article:
• NETIQKB1063: When translating security, why can I not find the accounts I migrated in the Security Account Selection screen?

When translating security:

1. On Files and Folders
   • Is there a difference between translating security for accounts that do have the SID History attribute verses those that don't? See Knowledge Base article:
     • NETIQKB860: What is the difference between Security Translation and Security Translation for Accounts with SID History and requirements?
   • How can I get DMA to automatically populate the object selection screen with only those computers that require security translation based on users I migrated? See Knowledge Base article:
     • NETIQKB1089: How do I automatically select only those machines with resources that need security translation for the selected users?
   • What about translating security for accounts that I've already migrated, and don't have a record of them--they don't appear in the Migrated Objects table (I.e. I just uninstalled and reinstalled DMA after a user migration, or I installed DMA on a different console machine after a user migration, or I deleted the Migrated Objects table somehow)? Please see Knowledge Base article:
     • NETIQKB2144: How can one translate security for non-migrated accounts by pre-populating the Migrated Objects table?
2. On User Profiles
   • What are some of the potential pitfalls I could hit during a user profile security translation? Please see Knowledge Base article:
     • NETIQKB893: What are the requirements, situations, and common errors for translating security on a user profile through DMA?
     • NETIQKB9243: Security is not translated on the user profile when migrating Windows XP computers with Domain Migration Administrator.
3. On Mailboxes
   • What about translating security for users' mailboxes, what might be important for me to know when going about that specific task? Please see Knowledge Base article:
     • NETIQKB2139: How does DMA translate security for Microsoft Exchange 5.5 mailboxes, and what are the requirements?
   • What about migrating multiple ownership or delegated powers, does DMA do that when translating security on mailboxes? Please see Knowledge Base article:
     • NETIQKB1490: Can DMA migrate the following properties for mailboxes: multiple ownership of the mailbox and multiple accounts that have delegated powers to another user's mailbox?

>PLEASE NOTE: To read more about general Gotchas or Helpful Hints when migrating User, Group, and Service accounts, please refer to the following NetIQ Knowledge Base article:

• NETIQKB1181: What are some of the general Gotchas or Helpful Hints one might want to know when migrating User, Group, and Service accounts with NetIQ's DMA tool?

.

Formerly known as NETIQKB1138