Member Avatar for SDiBen

Yes.....we are sort of still on Novell. However, I am new to the Active Directory world and need to create my first Active directory Forest. My test server is built, but haven't installed/initiated Active Directory services, etc. Any resources as on how to plan and create?

  • 3 Contributors
  • 3 Replies
  • 280 Views
  • 1 Day Discussion Span
  • Latest Post Latest Post by SDiBen

Dani AI

Generated

Short, practical plan for moving Novell -> Active Directory (lab first)

— good place to start with a dedicated test VM. Treat this as two projects: (A) design and deploy a small, clean AD forest in your lab, and (B) choose a migration/coexistence path for Novell accounts, home folders and passwords. There are a lot of online tutorials (as noted), but begin with Microsoft’s AD design guidance so your decisions (single forest vs. multiple domains, DNS name, functional level, sites/replication) match your future needs. (learn.microsoft.com)

Quick, safe first steps to try in the lab

  • Snapshot the VM (or take a hypervisor checkpoint) so you can roll back.
  • On the test server add the AD DS role and promote it to a new forest (Server Manager or PowerShell). Example PowerShell (run elevated):
    Install-WindowsFeature AD-Domain-Services -IncludeManagementTools
Install-ADDSForest -DomainName "ad.example.com" -SafeModeAdministratorPassword (Read-Host -AsSecureString)

    Follow Microsoft’s step checklist and validate DNS and SYSVOL after the reboot. Also configure time sync: the forest root PDC emulator should point at a reliable NTP source. (learn.microsoft.com)

Choosing a migration approach

  • Coexistence/sync: Novell provided AM/DirXML for eDirectory ↔ AD synchronization (password sync included) — useful for staged migrations. (support.novell.com)
  • Full migration tools: vendors such as Quest offer AD migration and coexistence products that handle account, SID/GPO mapping and workstation moves if you need automation. Test any tool thoroughly in the lab. (quest.com)

Operational pieces you mentioned

  • GPOs (not “GPLs”) give you patch control, RDP policy and security settings; learn GPMC workflows and test rollout in an OU. (learn.microsoft.com)
  • Patch management: WSUS can work for on-prem updates (Microsoft is steering customers to cloud update options over time), or use Configuration Manager / Intune for a modern approach. (learn.microsoft.com)
  • Password self-service / helpdesk reset: consider Microsoft Entra (Azure) SSPR with writeback if you plan hybrid identity. (learn.microsoft.com)
  • Remote Desktop access should be granted via Group Policy / Remote Desktop Users membership and limited on DCs for security. (learn.microsoft.com)

Immediate checklist to carry out in the lab

  1. Snapshot VM. 2) Install AD DS and create a small forest. 3) Create a test OU, user, and GPO. 4) Test logon, DNS, time sync, and GPO application. 5) Try one simple Novell->AD account (or use Novell AM/DirXML in lab) and validate password/home-folder mapping. Use the linked Microsoft/Novell vendor docs above for the detailed commands and options.

Recommended Answers

All 3 Replies

Member Avatar for rproffitt

It's been over a decade since I saw my last Novell server. But as to the resources I fear it's not a lack of resources on the web today but you may be overwhelmed by all that is out there. I'd start with https://www.google.com/#q=active+directory+tutorial or maybe take a class on Windows Server.

Member Avatar for rubberman

Amazing that there are still companies so far behind the wave that they are continuing to run Novell servers... That's almost like using a horse and buggy to commute 60 miles to work... Well, I suppose the Amish would do that, but I prefer my Toyota!

Member Avatar for SDiBen

Sad isn't it? If it works, why change it is the company's motto. I prefer to have the most efficient and secure but in an R&D company, IT is not prioritized and budgets are limited. Believe it or not, Novell makes a client for Windows 7. I need to transition to a Windows server and would also like to control and deploy GPL's including the ability to control patch management, password resets and remote desktop. I have a test server setup with no Active Directory role enabled. Looks like I have a lot of catch up on.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.