1 00:00:00,640 --> 00:00:01,470 Now, as I said, 2 00:00:01,470 --> 00:00:04,670 the main exam alert here is knowing a thing or two about 3 00:00:04,670 --> 00:00:07,350 Active Directory Migration Tool or ADMT. 4 00:00:07,350 --> 00:00:11,950 This is a free toolset that helps you move Active Directory objects, 5 00:00:11,950 --> 00:00:15,610 both between forests, as well as within a single forest. 6 00:00:15,610 --> 00:00:16,540 Alright? 7 00:00:16,540 --> 00:00:20,680 It is a database backed desktop application, 8 00:00:20,680 --> 00:00:24,080 technically it's a customized Microsoft Management Console, 9 00:00:24,080 --> 00:00:28,840 so you're going to be installing this tool on your administrative workstation, 10 00:00:28,840 --> 00:00:31,890 and it has a number of components that allow you to 11 00:00:31,890 --> 00:00:34,670 migrate several account types, including users, 12 00:00:34,670 --> 00:00:38,010 groups, service accounts, group policies, 13 00:00:38,010 --> 00:00:40,000 computer accounts, etc. 14 00:00:40,000 --> 00:00:45,660 As I mentioned, ADMT is database backed so it does require SQL Server. 15 00:00:45,660 --> 00:00:47,650 Now I just want to be the first to tell you, 16 00:00:47,650 --> 00:00:50,040 I'm probably not the first to tell you, 17 00:00:50,040 --> 00:00:54,280 that ADMT hasn't received any updates in a little while, 18 00:00:54,280 --> 00:00:56,000 in a few years anyway. 19 00:00:56,000 --> 00:00:58,690 So you'll find that you typically need to stand up an 20 00:00:58,690 --> 00:01:03,240 old version of SQL Server Express, and you'll find that, 21 00:01:03,240 --> 00:01:03,520 I mean, 22 00:01:03,520 --> 00:01:06,940 I think it's the fact that there hasn't been a lot of fundamental 23 00:01:06,940 --> 00:01:10,540 change in Active Directory in the last several years, 24 00:01:10,540 --> 00:01:15,080 so maybe Microsoft hasn't felt that need to update 25 00:01:15,080 --> 00:01:16,660 to blow the dust off the tool. 26 00:01:16,660 --> 00:01:18,110 It works fine as it is. 27 00:01:18,110 --> 00:01:20,970 As you can see, when you're in the MMC console, 28 00:01:20,970 --> 00:01:24,510 you right‑click Active Directory Migration Tool root node, 29 00:01:24,510 --> 00:01:26,730 and you can invoke any of these wizards. 30 00:01:26,730 --> 00:01:37,000 And notice that there is now a Managed Service Account Migration Wizard, that was the latest addition to this toolset where you can migrate GMSAs.