Windows Tools

MoveTree Notes

Overview | Notes | Syntax | Examples | Related Tools Open Command Prompt

Before Using MoveTree

Before using MoveTree you should do the following to maintain peak performance:

  1. Review all Group Policy objects that apply to a particular organizational unit, and make a note of the Group Policy settings they contain.
  2. Recreate the Group Policy objects, linked to the moved organizational unit in the new domain, with the desired settings.
  3. Make sure to remove the Group Policy objects linked from the old domain.

MoveTree Limitations

While MoveTree can move some Active Directory objects between domains, certain objects cannot be moved. MoveTree is also unable to move certain associated data that may exist externally to Active Directory.

Detailed Limitations

Local and Domain Global Groups

Local and Domain Global groups are not moved during a MoveTtee operation. During a MoveTree operation, all security principals (for example, user accounts and groups) maintain their security identity. This means that resources that were previously protected with ACLs do not have to have these ACLs reset. Provided that user and group memberships are maintained, security of access to resources is also maintained.

Universal Groups

Universal groups are moved intact during a MoveTree operation. However, because of group membership rules, only empty Domain Local and Global groups can be moved. Therefore it is important to save and recreate the memberships of Domain Local and Global groups to maintain the existing resource access permissions.

Computer Objects

Computer objects are not moved during a MoveTree operation. Use Netdom, another Windows XP Professional Support Tool, to move computer accounts between domains and to join computers to domains.

Associated Data

Associated data that is not moved during a MoveTree operation includes policies, profiles, logon scripts, and users' personal data. Use additional scripts or management tools, such as the Remote Administration Scripts (included in the Windows 2000 Resource Kit), in conjunction with MoveTree to perform these additional steps.

MoveTree cannot move the following objects:

MoveTree may fail due to some of the following error conditions:

When a MoveTree Operation is Paused or Halted

During a MoveTree operation, if the process is paused or halted, then any objects that have yet to be moved remain in an orphan container in the Lost And Found container in the source domain. The Lost And Found container can be viewed in the Active Directory Users and Computers snap-in (a Windows XP Professional administrative tool) when the Advanced View menu option is selected. The orphan container is named using the globally unique identifier (GUID) of the parent container being moved and can be readily identified; it will contain the objects that were selected for the MoveTree operation.

For example, if an organizational unit called "Sales" was being moved, and it has an object GUID of {123-abc}, and the MoveTree operation were halted, then the tree structure would look like this:

Lost + Found

MoveTree ErrorLevels

MoveTree returns ErrorLevel 0 for success and ErrorLevels 1 through 5 for different kinds of failure. These values can be used as criteria for branching, when the tool is used in a batch file; see Example 5: Use MoveTree in a Batch File in MoveTree Examples.

Error Level Meaning
0 Success
1 Error – command line syntax
2 Error – directory conflict (duplicate names, insufficient privilege, name conflict, immovable object)
3 Error - network error (DC unavailable)
4 Error – system resource (Low VM, disk space)
5 Error – internal processing error