de-DEen-US
Language
Search
× Search
Sunday, September 8, 2024

CopyRight2 Active Directory Migration Features

See how easy an Active Directory migration can be. Migrate users (with passwords), groups, OUs, distribution lists, contacts & more. Get the free trial now.

CopyRight2 is a market leading Active Directory migration tool. Safely and securely transfer users, groups, contacts and more between domains, within the same or across different forests.

Users

Migrate user account objects including passwords.

Groups

Migrate local, global and universal group objects including group members.

Contacts & Distribution Lists

Migrate contacts and distribution lists including their members.

Computers

Migrate Windows® user profiles and optionally change computer domain memberships remotely.

OUs

Optionally migrate OUs and the OU hierarchy from the source to the target domain.

Object Permissions

Migrate object permissions along with the objects.

CopyRight2 Advantages

CopyRight2 is a lot easier to use and does not have the complexity and overhead of other solutions. Watching the 12 minute video below, will explain all you need to know, to perform AD migrations. CopyRight2 does not require a trust between source and target domains. Neither does it require any agents that have to be installed, nor does it require an SQL server instance.

Tutorial Video

Active Directory Migration Video Thumb

Optional sidHistory Support

CopyRight2 supports sidHistory for intra- and interforest migrations but doesn’t require it. When enabled, it migrates source account SIDs, temporarily granting resource access. This allows independent migrations of accounts, resources and computers. Post-migration, sidHistory can be cleaned up during or after data transfer, with CopyRight2 simplifying the process.

Intra-Forest Domain Migration

CopyRight2 supports account migrations between domains residing in the same forest.

Inter-Forest Domain Migration

It also supports migrations of accounts between domains residing in different forests.

Support for Delegated Admins

CopyRight2 supports sidHistory and allows delegated administrators in the target domain to manage sidHistory entries selectively. They can add sidHistory to objects they manage without needing access to sidHistory of other objects.

Compatible Active Directory Versions

CopyRight2 supports Active Directory from Windows® 2000 to 2022, Azure® Entra Connect (formerly AD Connect), AWS® Directory Service, Synology® Directory Server and Univention® UCS. Each can be used as a source or target directory.

Windows 2019 Certification Logo
Windows 2016 Certification Logo
Windows 2012 Certification Logo
Windows 2008 Certification Logo
Windows 2003 Certification Logo
Windows 2000 Certification Logo

Migration of NTFS and Share-Level Permissions

Share and NTFS-level Permissions

Using CopyRight2, you can replace the source accounts in file share and NTFS permissions with those migrated to the target domain. Either on-the-fly while copying data or in-place if the data should remain in the current location.

Single Step Approach

You can migrate domain accounts automatically during the data migration. CopyRight2 will then migrate any accounts having either direct or indirect permissions granted in NTFS or share level permissions.

Multiple Steps Approach

Additionally you can run a separate job migrating Active Directory objects in a first step. Next you can run the data migration in a second step. Running the account migration separately from the resource migration provides you with more control over the process.

Migrate From Other Domains, Domain Members and Workgroup Systems

CopyRight2 fully supports all Active Directory group types, including local, global, universal, security and distribution list groups. It also migrates local accounts between domain member computers, workgroup systems and domains.

Easy Deployment

CopyRight2 can be installed on any computer, preferably on a domain controller of the source or the destination domain. After installation, you can easily set up and run AD migration tasks. You can also schedule them to run later at a specific time.

24/7 Support and 2 Years of Free Updates / Upgrades

In case there is a problem using the software, you can contact Sys-Manage's support at any time. Our experienced support engineers have helped thousands of customers to complete their projects successfully. You can contact us at any time using email or by telephone.

Multiple Account Selection Options

Select Objects To Migrate in High Resolution

Easily select the objects to migrate from the source domain's Active Directory tree.

Alternatively, you can perform a migration of all items to the new domain, use a CSV file, or apply an LDAP query with filters.

Define Active Directory Attributes to Copy

CopyRight2 Active Directory Attribute Settings

CopyRight2 lets you choose which attributes to copy based on object type using its attribute in- and exclusion list.

Migrate OU and Container Hierarchy

CopyRight2 Active Directory OU Settings in High Resolution

Using CopyRight2, you can migrate accounts to the default 'Users' container or a specified container.

If enabled, the original OU hierarchy will be preserved and copied below the chosen target OU.

Transfer Active Directory Object Permissions

CopyRight2 Object Security Settings in High Resolution

CopyRight2 can migrate permissions on any Active Directory objects, including users, groups, contacts, distribution lists, OUs, and containers.

It transfers access permissions defined by DACLs, auditing settings defined by SACLs and ownership details.

Schedule Jobs For Background Execution

Copyright2 Task Scheduler Settings in High Resolution

You can schedule any jobs to run automatically in the background at specified intervals.

Receive email notifications for the job in case of success and/or error.

Customize and Transform Objects

Copyright2 Active Scripting Settings in High Resolution

You can define scripts for each object type, such as users. The script runs when you migrate an object of that kind, allowing you to easily adjust attribute values.

You can use this VBScript code to add 'PREFIX_' to a migrated object's 'samAccountName' attribute:

Destination("samAccountName")="PREFIX_" & Source("samAccountName")

Use the Windows® SID-HISTORY Feature

CopyRight2 sidHistory Settings

Interforest migrations: Clone source accounts in the target domain and set sidHistory to the corresponding source SID.

Intraforest migrations: Accounts will be moved between the domains instead. The sidHistory attribute automatically gets set to the corresponding SID of the original account.

You can find more information about using the Active Directory sidHistory attribute in the CopyRight2 Documentation.

Account and Data Migration Without sidHistory

It is, however, not a requirement to use the sidHistory attribute with CopyRight2. Copy user and group accounts directly. Change NTFS and file share permissions while copying data or modify them in-place without transferring the data.

Frequently Asked Questions

What types of Active Directory objects does it support?

CopyRight2 migrates users, contacts, groups (global, local, universal), distribution lists, members, OUs and optionally object permissions (ACL). You can define which attributes to transfer per object type. For extensibility you can define small scripts to transform objects during the migration.

Does it require a trust?

No, it does not require a trust between domains. It works though if a trust is in place, but it is not a requirement. You can also copy objects from a member or workgroup mode system to a domain with it.

Does it support sidHistory?

Yes, it does. SidHistory requires several prerequisites, including a trust. Once these requirements are fulfilled, using sidHistory is easy and only requires checking a checkbox.

For more details, consult the CopyRight2 documentation.

If migrating without sidHistory, use a Data Migration job to copy data and replace accounts. If data stays in place, a Security & Attributes job can adjust permissions.

Do You Have Any Questions or Suggestions?

In case of any questions or suggestions, please feel free to contact us at support@sys-manage.com. We like hearing from you.
Terms Of UsePrivacy StatementCopyright © Sys-Manage, 1998-2024. All Rights Reserved.
Back To Top