Authentication Wizard - Domain Change and Profile Migration

Two Source to One Destination Domain Migration Scenario

This document provides a step-by-step guide on how to use the Authentication Wizard to configure authentication roles for the Two Source to One Destination Domain Migration scenario. This scenario covers workstations and user profiles being moved from one domain to another domain. Source computer accounts are in a different domain than the source users. User profiles and workstations are migrated from both source domains to a single destination domain. Authentication is done using Domain Admin accounts with local admin access to their respective computers. All other settings should be configured using the Easy Setup Wizard.

Step-by-Step

1. If it is not already running, the Authentication Wizard can be launched as part of the Easy Setup Wizard or by clicking on the Authentication Wizard button on the Authentication tab on the main Console screen.
   
   
2. Select Domain Change and Profile Migration Only. Click Next >>.
   
   
3. Select Domain User -> Domain User migration. Click Next>>
   
   
4. Answer No when asked if all source user accounts and computer accounts are in the same domain. Click Next >>.
   
   
5. Answer Yes when asked if all destination user accounts and computer accounts will be in the same domain. Click Next >>.
   
   
6. Select Domain admin accounts with local admin access. Click Next >>.
   
   
7. Enter the Username, Password, and Domain for a domain user account which meets these criteria:
   • Any active user account in the source user domain.
   
   This account will be used for the Source SID Lookup authentication role. Click Next.
   
   
8. Enter the Username, Password, and Domain for a domain user account which meets these criteria:
   • Member of the 'Domain Admins' group in the source computer domain.
   • Local administrator access to computers (before domain change).
   
   This account will be used for the Administrator A authentication role. Click Next.
   
   
9. Enter the Username, Password, and Domain for a domain user account which meets these criteria:
   • Member of the 'Domain Admins' group in the destination domain.
   • Local administrator access to computers (after domain change).
   
   This account will be used for the Administrator B, Domain Join Privileges, and Destination SID Lookup authentication roles. Click Next.
   
   
10. The Authentication Wizard is complete. You are presented with the option to Override Settings if you choose, however this is not recommended as incorrect configuration of the authentication roles can result in failure of the migration on one or more clients. Click Finish to complete the wizard.