Moving Users accross AD Domains in sameForest

[Guest]

Is it possible to move users accros AD Domains within the same forest? I have tried with users who are only a member of the Domain Users Group and had no luck. Am i doing something wrong or can this be done?
Thanks,
Jeff

[cmccullough]

Re: Moving Users accross AD Domains in sameForest

Are you getting any errors, and if so what are they?
What steps are you taking to move these users?
What version of Hyena are you running, and on what OS?

[Guest]

Re: Moving Users accross AD Domains in sameForest

Version 4.7 Error:
Unable to move directory object
'ldap://server.childdomain.root/cn=fallona,cn=users,dc=childdomain,dc=root' to 'ldap://root/ou=msg_is,dc=root' . The server is unwilling to process the request.
--Extened Error --
5003(Will_Not_Perform), Data 0

Any help appreciated,
Jeff

[kstanush]

Re: Moving Users accross AD Domains in sameForest

The results and success of this action is controlled by Windows, Active Directory, and Microsoft. Hyena uses the "MoveHere" Active Directory function to move objects, and it would appear from the error that Microsoft does not support this action. I vaguely seem to recall that this may be a new feature in Windows 2003.

[Guest]

Re: Moving Users accross AD Domains in sameForest

Ok, so I can't use the Move function in Hyena unless I have Win2k3's version of AD running? I just need a definitive answer to provide management with.

Thanks,
Jeff Lynch

[kstanush]

Re: Moving Users accross AD Domains in sameForest

I can't say for sure, as this is something that we can't test. If Microsoft's function supports this, then so will Hyena. If you have this type of configuration now, then you can test it with the current version. But, since this version of Windows is not released yet, I could understand that you may not have this configuration yet either.

[Guest]

Re: Moving Users accross AD Domains in sameForest

Fair enough, but can you definitively say that the move function available in 4.7 will not allow for an AD Cross Domain Move?

Thanks,
Jeff Lynch

[Guest]

Re: Moving Users accross AD Domains in sameForest

under 200's AD

[Guest]

Re: Moving Users accross AD Domains in sameForest

err, under 2000's AD

[kstanush]

Re: Moving Users accross AD Domains in sameForest

I may not be explaining it right, but Hyena does not concern itself with the type of object being moved, where it is coming from, or where it is going. Hyena simply uses the built-in Active Directory/Microsoft-supplied "MoveHere" function that every Active Directory object supports. The object (or the directory itself) actually does the 'moving' and whatever else comes along with the move operation.

So, if Hyena v4.x is run on a Windows operating system (perhaps a future version) that supports cross domain/cross forest moves, and if Microsoft has implemented this into the MoveHere operation, then it will work. We (SystemTools) can't make the move operation work under its supported by the underlying operating system.