Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack Thread Tools Display Modes
BES AD Domain Migration
 
  #1 (permalink)  
Old 02-05-2009, 12:05 PM
BES Addict
 
Join Date: Feb 2009
Location: Toronto
Posts: 69
Post BES AD Domain Migration

Hi there,

Just wondering if anyone has had some experience with this, I searched RIM's support database and didn't come up with anything obvious (mabye my search-fu was not strong enough).

Infrastrucutre setup:

We have 2 AD (Windows 2003) domain that we're consolidating into one. As a part of this project we're doing inter-forest AD account moves via ADMT from Domain B (the domain where we consolidating into) to Domain A. Our messaging envirnment is Exchange 2007 SP1 Rollup 2 (going to 5 eventually), BES is 4.6.1 MR1. All BES infrastructure is currently in Domain B, Exchnage users are mostly in Domain A (part of our Exchange 2007 migration)

The Big Q:

My Q is has anyone moved a BES between two different AD domains in the same AD forest?
BES & its MS SQL Server 2005 database are in AD Domain B. We want to move the BES, its service account and the SQL database into domain A.

Ideal Optional - In domain A we have another BB Domain (not ad Doman) that has a seperate service account with the neccessary delegated permissions.

Can I just move the BES's computer account into the new AD domain, configure & configure it to use a new service account. Or are there some database Perms that needs to setup (apart from granting the new service account DBO rights on the DB).

Anyone else been through this before? Any comments/ideas/thoughts/ would be appreciated.

Much appreciated!
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 02-06-2009, 02:22 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default

Given that you're doing an inter-forest migration and not an intra-forest migration you need to wipe and reactivate everyone.

The barrier for a BES is the Exchange Organization. As you'll be going from one Exchange org to another Exchange org you'll need to start fresh.

No way around it.
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
  #3 (permalink)  
Old 02-06-2009, 02:28 PM
BES Addict
 
Join Date: Feb 2009
Location: Toronto
Posts: 69
Default

Hi Everyone,

Doh, my bad.... typo... we're actually doing an INTRA-FOREST. We've moved users between domains with no hiccups/issues, at most I have to do a BES user reload or a handheldcleanup on the BES to make sure all is well. But has anyone tried to move a BES between domains before and changing the service acct?
Reply With Quote
  #4 (permalink)  
Old 02-06-2009, 05:00 PM
Otto's Avatar
Proprietor
 
Join Date: Nov 2008
Location: Atlanta, GA
Posts: 2,033
Blog Entries: 14
Default

In theory, the service account should not matter. For example, if your account becomes corrupt or accidentally removed (and unrecoverable), you could set up a new one, add the correct permissions required (everywhere), and be up and running once again (if you've been in the BES game for a while, you'll see this vastly differs from 3.x to 4.x).

I think the logic for your move could be viewed as if you can have User A from Domain B on BES A, then moving BES A (Service Account A) to the same AD domain as BES B should allow users on Domain A to still operate without issue. At that point, it would be to simply migrate the users to Domain B accordingly. Of course, this may be simply a short-sighted view of the setup

If everything is working correctly with regards to AD and Exchange permissions (and based on your previous statement that you've had cross-domain migrations without hiccups), then I would think that you should be fine. I'll let hdawg chime in on it again, as I think he has experience with this sort of scenario, though.
__________________
BCSA (4.1, 5.0) | BCSD (4.1, 5.0)

The views expressed by me on Port3101.org are my own and do not necessarily reflect the views of my employer.
Reply With Quote
  #5 (permalink)  
Old 02-08-2009, 01:49 PM
hdawg's Avatar
Proprietor
 
Join Date: Nov 2008
Posts: 2,257
Blog Entries: 147
Default

So you just want to move the BES from one AD domain to another AD domain in the same forest; sure that is absolutely possible.

With moving SQL too, check out: KB03112 - How to move the BESMgmt Database to a new SQL Server or instance. Make sure you document the permissions you have in place for SQL and follow that procedure to the T ... don't skip the step where you have to do CreateDb.exe BESMgmt.cfg.

Good luck!
__________________
http://blog.port3101.org/hdawg/
Reply With Quote
Reply

Bookmarks

Tags
ad domain migration, exchange 2007

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
BES migration to VM and upgrade jharm Port 3101: The BES Admin Bar & Grill 1 04-06-2011 09:54 AM
BES to BES Express Migration ahmedbilalmir Port 3101: The BES Admin Bar & Grill 5 10-24-2010 07:11 PM
BES - BES migration millardus Port 3101: The BES Admin Bar & Grill 2 11-27-2009 06:53 AM
BES Migration IT135 Port 3101: The BES Admin Bar & Grill 2 05-30-2009 05:10 PM
KB13871 - How to perform a migration using the BES Migration Kit hdawg Featured BlackBerry KB Articles 0 05-26-2009 11:55 AM


All times are GMT -4. The time now is 02:25 PM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2