The migration scenario:
- Two different forests;
- Exchange 2007 in one forest and Exchange 2010 in the other;
- Exchange 2007 with SP2 installed.
Requirements:
- Create a DNS Conditional Forwarding on the source domain for the destination domain;
- Create a DNS Conditional Forwarding on the destination domain for the source domain;
- Before starting the migration itself, you need to trust between the two domains and deactivate SID Filtering:
- Netdom trust destination.local /domain:source.local / quarantine: No / usero: destination\user / passwordo: *******
- Netdom trust source.local /domain:destination.local / quarantine: No / usero: source\user / passwordo: ********
This way, when migrating with ADMT, users' SIDs remain the same (Filtering Disabled), thus ensuring the same permissions on files and groups in the target domain.
With ADMT installed on a server machine in the target domain, migrate the users/groups from the source to the destination (need to install the password exporter on a Domain Controller at the source, so we can guarantee the passwords are the same in both domains)
O In this document I will not go ahead with the ADMT settings.