Thursday, October 25, 2007

PasswordCopy 64bit Windows

Domain PasswordCopy is not supported for 64bit version of Windows DCs. The password copy process fails with errors and the passwords are not extracted from the source or set on the target DC.

Work Around

By using a proxy 32bit Windows domain controller and replicating to the 64bit domain controllers, passwords can be copied from source to target domains.

32bit Source DC - 64bit Target DC

Add a temporary 32bit Windows Domain controller to the target domain. Move the PDC emulator to the 32bit DC. Using the Winzero CopyPassword Domain Edition, copy the passwords as normal. Once the password copy process is complete, and enough time has passed for the target domain controls to replicate, move the PDC emulator back to the target 64bit DC and remove the 32 bit Domain Controller from the target domain.

64bit Source DC - 32bit Target DC

Add a temporary 32bit Windows Domain controller to the source domain. Move the PDC emulator to the 32bit DC. Using the Winzero CopyPassword Domain Edition, copy the passwords as normal. Once the password copy process is complete, and enough time has passed for the target domain controls to replicate, move the PDC emulator back to the source 64bit DC and remove the 32 bit Domain Controller from the source domain.

64bit Source DC - 64bit Target DC

Add a temporary 32bit Windows Domain controller to both the source and target domains. Move the PDC emulator of each to the 32bit DC. Using the Winzero CopyPassword Domain Edition, copy the passwords as normal. Once the password copy process is complete, and enough time has passed for the domain controls to replicate, move the PDC emulator back to the 64bit DC and remove the 32 bit Domain Controller from the source and target domain.

No comments: