ADUM Support FAQs

ADUM Enterprise Competitive Software Upgrade.

2012-09-17T14:40:00.000-07:00

For a limited time, if you own any Quest Software, Scriptlogic Software, ForensiT, NetIQ, Winzero or Microsoft ADMT, it is the best time to take advantage of our competitive upgrade to ADUM Enterprise reg. $649.00 for just $349.00 and learn what ADUM offers over the competition.

WHAT DO I GET?
ADUM Enterprise Edition gives you a unified unrestricted license for our ADUM Enterprise Edition Software bundle consisting of ADMigrator, ServerMigrator, PasswordCopy, SecuRED and TakeControl as well as a number of OEM and third party administrative tools including any future software releases until Dec 31, 2013. ADUM Enterprise Edition also includes support and maintenance until Dec 31 2013

HOW MUCH AND WHEN IS IT AVAILABLE?
This offer is available now for a limited time to existing QUEST, NETIQ, Scriptlogic, ForensiT, MIcrosoft and Winzero customers for just $349.00 USD online only at this special link only.

http://www.managered.com/adum-upgrade.html

DO I QUALIFY?
If you own or use any Quest Software, Scriptlogic Software, ForensiT, NetIQ, Microsoft ADMT, ManageRED ADUM Small business, ADUM Server, Resemble or Winzero Enterprise Toolbox, ITPro Toolbox, WADMIgrator, ServerMigrator, Resemble, ACLReporter, DNSReset, PasswordCopy, SVRCompare, RemoveUnknown or any other discontinued Winzero Software now is the time to ACT!

ManageRED Software
Upgrade Now

How to Migrate Local Server Users and Groups Only Between Member Servers

2012-08-07T22:19:00.000-07:00

View our complete document to help you migrate server accounts, local user accounts with properties, with passwords and local server groups from Windows member server to Windows member server with similar or different OS versions.

Both ADUM ServerMigrator and ManageRED Resemble solutions allow for the migration of local accounts form server to server automatically.

User Accounts

· User account samAccountNames are recreated on the target server.

· Passwords for each account are copied.

· User name and description properties are copied to the target

· Terminal server settings and properties are copied to the target server for each account that is populated on the source server

· All user rights are migrated to the target server.

Local Goups

· Local group samAccountNames are recreated on the target server.

· Group description properties are copied to the target

· Group membership is populated with migrated accounts of the target server in the same samAccountName structure as the source server.

F View the complete step by step document...

Migrate Local Server Accounts to Domain Accounts

2012-08-03T14:22:00.000-07:00

ADUM Server Edition, using the ServerMigration App, will convert local server user accounts and local groups to domain accounts and maintain resource security without user impact or downtime..

This process will recreate the source account in the target domain and in any selected OU.
User properties are copied to the converted domain accounts including passwords.
Local groups can be converted into domain local groups then populated with the new migrated domain user accounts.

Once the accounts are created, the source server is reACLed for files, folders and shares using an append process, whereby both the local accounts and domain accounts have the same access to resources. This is done because of the different SIDs between local and domain accounts.

The last step, once satisfied, know as the cleanup process, is to remove the local accounts from the server and the resources.

ADUM also includes third party free tools to automatically repermission SQL databases with the new accounts

Because ADUM Server Edition includes 1 hour of support, once purchased a ManageRED Migration Expert can get the client started with the the process of converting local accounts to domain accounts.

ServerMigrator is the ONLY software to perform this task on the market today.

Learn more about ADUM
Learn more about ServerMigrator

How It Works - Resemble 30 Day License

2012-08-02T18:21:00.001-07:00

Got a single Server migration project? Need to migrate only a few servers?

ManageRED Resemble 30 Day License is the inexpensive solution for quick server migration projects.

Download it and try it, then purchase Resemble 30 day License a fast server migration solution for just $39.00 USD with a non restricted license without per user or per server licensing for 30 days.

Purchase what you need when you need it or upgrade to any ADUM Bundle at any time and the amount you spent on Resemble 30 Day License will be deduct from your ADUM purchase.

More information on Resemble 30 Day License

Download an evaluation

Buy it Now!

ADUM Licensing Issues with Copy-Paste

2012-07-30T17:47:00.000-07:00

Recently when customers copy their license key for ADUM Enterprise, Server or Small Business Edition from the email sent to them after their purchase, an issue arises that leaves the ADUM software in Evaluation Mode.

This issue is caused by copying a trailing space after the license key as shown below. The trailing space can not be seen until the license key is highlighted.

To resolve this issue, highlight the license key and remove (delete) the trailing space and click on the License button. ADUM will now be in licensed mode for which ever version that was purchased.

Microsoft Special Permissions

2012-06-16T23:21:00.002-07:00

An Administrator’s Nightmare or Easy Shortcuts.

Microsoft introduced special permission after the release of Windows 2000. It is a representable view of applying permissions to files and folders by allowing permission to be granted to named groups in various permission levels.

At an individual level or in a small network special permissions do not create known issues; however, in large organization the use of special permissions create auditing and accountability issues as well as security management issues.

The special permissions applied in certain areas and not a standard. This permission applies to a group or a person as the owner of a folder, folder tree and files. Being an owner of a folder does not grant the person or group rights to the folder or files. It requires a proxy. In this case the proxy is a named Windows builtin SID called Creator/Owner and the permission is granted to it.

If an audit was to be performed, the actual permission as to who has permission to what would be become a nightmare to perform because the audit trail would use the permission of creator\owner. And because multiple users or groups can be creator/owners there would be no security accountability.

In a migration scenario regardless of tool set being used (QUEST, Microsoft, ADUM) it would be impossible to maintain a co-existence between 2 domains during migration because there can only be ONE owner. Therefore any folder being accessed by special permissions can only be accessed by one account from one domain at a time. In a large migration that involves migration in incremental stages the special permissions scenario would not grant rights to folders and files from multiple domains.

The Solution

ManageRED with ADUM 8.00 or higher, has developed a non-intrusive method of providing coexistence from multiple domains whereby the special permission limitation has been removed. All accounts either explicit or through ownership are granted the same permissions to files and folders without destroying the original permission.

This process is now incorporated into the latest update to deal with the random use of special permissions throughout a network without user intervention or down time during the reACLing process.

Akos Sandor

Director, ManageRED Software

Active Directory groupType Attribute

2012-01-17T15:15:00.000-08:00

Active Directory groupType Attribute

-2147483640 universal security group
-2147483646 global security group
-2147483644 domain local security group
-2147483643 builtin security group

2 global distribution group
4 local distribution group
8 universal distribution group

This is used by all ManageRED ADUM softawre, OEM and ManageRED ADSearch software as group type coding.

ManageRED PasswordCopy Requirements

2011-07-06T12:50:00.000-07:00

In order to copy passwords the minimum requirements must be met:

Windows 64bit (Windows 2008R2) ***

When Windows 2008R2 or any Windows 64bit server is involved in the password copy process the LSA must be manually edited before starting the process.

On the 64bit computer(s), DC or member server, navigate to:

HKEY_LOCAL_MACHINE
SYSTEM\CurrentControlSet\Control\Lsa\
List: SecurityPackages

The SecutityPackages key must contain only: kerberose, msv1_0, schannel, wdigest, tspkg

Edit this key to be exact as above by removing any extra entries and reboot the server for the change to take effect.

Virus scan software must be disabled during a password migration. False Trojan readings and required files may be quarantined.

PDC - PDC Emulator (Windows 200x FSMO Server) requirements:

Drive letters must be shared example C$, D$ etc
The Windows directory must have the Administrative Share ADMIN$
Remote registry services must be running
The DCs must be reachable by Name (NETBIOS name Resolution must be working across subnets)
The DCs must be remotely manageable (Windows Firewall issues)
Service Account and the operator must have domain Administrative rights
Service Account must have logon Locally and Run as a Service Right.
The Target Domain Password Policy must be less restrictive then the Source Domain Password Policy
2 way trusts must be in place and functional

Password Copy in Workgroups

Drive letters must be shared example C$, D$ etc
The Windows directory must have the Administrative Share ADMIN$
Remote registry services must be running
The servers must be reachable by Name (NETBIOS name Resolution must be working across subnets)
The servers must be remotely manageable (Windows Firewall issues)
Service Account and the operator must be ADMINISTRATOR
Service Account must have logon Locally and Run as a Service Right.
The Target Password Policy must be less restrictive then the Source Password Policy

Password Copy Console Computer

Service Account and the operator must have domain Administrative rights
Service Account must have logon Locally and Run as a Service Right.
Windows Firewall must be turned off or set in the remote manage state
All DC must be reachable by name

Administrative Rights Domain Recommendations

Install the PasswordCopy Software on a computer in the Target Domain
Create or select an account from the Target Domain
Add or verify the account is a member of the Target Domain Admins group
Add or verify the Target Domain Admins group is a member of the Source domain Administrators local group
Add or verify the account can logon locally and run as a service on the source, target DCs and the local computer.
Use the account as the service account
Logon to the console computer with the account.

Windows Vista, Windows 2008 and Windows 7

PasswordCopy supports Windows Vista, Windows 2008 and Windows 7. However in order to run administrative tools on these platforms, Windows firewall and Windows User Account Control must be turned OFF
RemoteRegistry services must be running and netBIOS over IP resolution must be enabled

ManageRED Software to Release Password Copy with 64bit Support

2011-04-12T06:52:00.000-07:00

With the development of a 64 bit password copy solution, ManageRED Software will be the first software provider to release a complete password copy software solution set to migrate customers to Microsoft Windows 64 bit server platforms on April 15, 2011.

Many businesses are considering moving to Microsoft 64 bit platforms such as Microsoft Server 2008 and Microsoft Server 2008R2 from their current 32 bit platform. ManageRED will integrate the new 64bit solution set into PasswordCopy designed to migrate or synchronize Windows servers and domains.

ManageRED's PasswordCopy will make it possible to migrate local server account and domain account passwords for organizations wishing to transition off Microsoft 32 bit platforms in one operation. With support for selective account password copy and synchronization, allows for co-existence of multiple platforms. Businesses will be able migrate local server account or domain account with passwords incrementally into Windows 64 bit servers as they transition away Windows 32 bit.

As customers begin to adopt Windows 64 bit Servers, we want them to know that ManageRED Software offers the best of breed password copy solution with technical expertise to help them move successfully, cost-effectively, with reduced downtime to their new 64 bit platforms' said Akos Sandor, chief technology officer, ManageRED Software.

Availability
ManageRED Software will release the new 64 bit password copy solution as a significant upgrade to their existing software line. PasswordCopy will be available directly from the ManageRED website starting April 15, 2011 for an introductory price of $249.00 USD for an unlimited enterprise license.

About ManageRED
ManageRed Software is a leading provider of Microsoft Windows management software worldwide enabling customers to centralize and reduce repetitive administration, migration and ongoing day to day Windows management while benefiting from reduced risk and improved operational efficiencies.

WADMigrator-ServerMigrator Permission Issues

2011-04-03T13:59:00.000-07:00

Windows 7 Operating Systems - Desktop/Laptops:

Issue:
Unable to install the scheduling service client on any Windows 7 workstation within the environment. Console indicates that “the installation path cannot be determined”

Diagnosis:
Remote Registry is set to Manual and is not started
UAC is enabled on the workstations

Resolution:
Set the Remote Registry service to Automatic
Disable UAC on the Windows 7 Desktops/laptops/Tablets/Workstations.

Both Items can be modified via Active Directory Group Policy. The latter policy requires a reboot.

Windows 2008 Server’s

Issue:
Unable to install the scheduling service client on any Windows 2008 Servers within the environment. Console indicates that “the installation path cannot be determined”

Diagnosis:
UAC is not completely disabled. The following registry key has the following value set:

HKLM\Software\Microsoft\Windows\Currentversion\Policies\System\ConsentPromptBehaviorUser. This key has a value set to 1. This is not the default setting.

An explanation of this setting is as follows:

User Account Control: Behavior of the elevation prompt for standard users
The User Account Control: Behavior of the elevation prompt for standard users policy setting controls the behavior of the elevation prompt for standard users.

The options are:
Automatically deny elevation requests. When an operation requires elevation of privilege, a configurable access denied error message is displayed. An enterprise that is running desktops as standard user may choose this setting to reduce help desk calls. *****Has a value of 0 in the registry*****

Prompt for credentials on the secure desktop. (Default) When an operation requires elevation of privilege, the user is prompted on the secure desktop to enter a different user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. *****Has a value of 3 in the registry*****

Prompt for credentials. When an operation requires elevation of privilege, the user is prompted to enter an administrative user name and password. If the user enters valid credentials, the operation continues with the applicable privilege. *****Current Setting****** and has the value of 1

These are the available settings:

0 = Automatically deny elevation requests
1 = Prompt for credentials on the secure desktop
3 (Default) = Prompt for credentials on the secure desktop

Please refer to the following link: http://technet.microsoft.com/en-us/library/dd835564(WS.10).aspx#BKMK_StandardUserPromptBehavior

Resolution:
On all Windows 2008 Servers, the ConsentPromptBehaviorUser key must have a value of 3 (which is the default Windows 2008 setting). A reboot is not necessary for this change to take effect.

The above changes are mandatory and were part of the Checklist provided to the customer as part of the pre-migration checklist.

Special Thanks

A special Thanks goes to Bruno Zaffino from Compucom for his diligence and relentless effort to trouble shoot the challenges faced by the domain migration at the Government of Ontario Migration Project.

How to Find Sam Watson with N-able Free Security Software

2011-03-28T10:46:00.000-07:00

Find any account, user or group, on one or more Windows servers. Find folder access, find share access, find group membership with N-able ACLReporter your free security report software.

Now you have no excuse to prove that your server security settings are accurate when demanding auditors or CIOs demand documentation. No excuses, because now you can download N-able ACLReporter for FREE!

Learn how to get your FREE COPY OF ACLREPORTER today

N-able Technologies to Release ACLReporter as a Free Download

2011-03-14T21:37:00.000-07:00

N-able Technologies Inc (kanata ON) to release ACLReporter as a free download later this month...

ACLReporter's reporting process simplifies and shortens server security reporting projects, providing the fastest security settings collection and reporting performance available on the market. In addition, ACLReporter provides IT administrators with a granular level of control by reporting only what they need to know from multiple servers in multiple domains.

New SecuRED Update...

2011-02-18T12:49:00.000-08:00

ManageRED SecuRED Update 021811

ManageRed has released the latest version of it's security reporting application SecuRED.

SecuRED version 5.00 Build 021811 features a new look, a new faster NTFS collection engine and a new licensing model.

ManageRED SecuRED Key Features

Simplify Security Reporting by configuring only what should be collected and reported on.

Assist with Compliance. Proactively maintain and report on access controls to address many of the requirements of regulatory and best practices standards.

Enhance Windows Security. Find weaknesses, over-exposed files, over-privileged users with complete security audits in minimal time.

ManageRED SecuRED is available as an update to ManageRED Clients or as a download at ManageRED Software.

New Winzero ScheduleManager

2011-02-15T10:51:00.000-08:00

A new version for the Winzero ScheduleManager has been released as an update or as a standalone application.

To download the new ScheduleManager

Navigate to http://www.winzero.ca/downloads/ScheduleManager021611.zip and save it to your computer.

To add the update to any Winzero applicaton including: ServerMigrator, WADMigrator or AccessReporter, unzip the download to drive:\Winzero\ApplicationName\ and allow it to over write any files.

To use ScheduleManager as a standalone application, create a folder and unzip the download into the new folder. Navigate to the folder and double click ScheduleManager to launch.

What's new In ScheduleMnager

- ScheduleManager now supports Windows 2008R2 and Windows 7 64bit
- Import computers from WADMigrator Projects
- Quick deployment Status Reports to reduce overhead

Compare the Top 3 Server Migration Software Solutions

2010-11-28T22:51:00.000-08:00

If you are faced with a server migration project, select the best software solution that meets your technical needs and your budget.

We compare the top three (3) server migration software packages on the market today to see how they stack up.

WinzeroTECH ServerMigrator information
ManageRED Resemble information
ScriptLogic SecureCopy information

ServerMigrator v7.0 - Windows 2008 R2

2010-07-18T20:56:00.001-07:00

To successfully migrate local account passwords to or from Windows Server 2008R2, after insatalation of ServerMigrator v7.0x, verify the following registry entries for the Lsa key:

Click image to enlarge
The keys must be exactly as illustrated... if you need to make changes the server must be rebooted before the change will take effect.

Winzero Download and Product Update Web Changes

2010-05-12T00:23:00.000-07:00

How to use the update download for Winzero Products.

Because of recent changes to the Winzero website the Winzero product updates must be downloaded and installed manually. You must request software downloads and updates links. Once a request is received, a direct software download and it's update links will be emailed to you.

How to Install Winzero Products

Any Winzero product that has had a minor update since its last release version will have a link supplied with the download link to include a link to the products update.
Once you download the Winzero product, unzip the download to a temporary folder. Run the Setup.exe to install the product.

Most Winzero Product will automatically start once the product is installed. After installation, Exit the Winzero product.

How to Update Winzero Products

Once the installation process is complete and the product is completely closed, download the update from the direct download link supplied.

The Update file will be a compressed zip file. To update the Winzero Product to the latest build unzip the update file into the working directory of the Winzero product usually Drive\Winzero\ProductName\.

This process will overwrite any files that have been updated since the last complete release.

Top Five Server Migration Mistakes.

2010-02-01T12:12:00.000-08:00

1. Server Downtime
Server downtime is probably the most-heard concern when performing a migration. This is because most migration processes require the source server be offline, either during the conversion process or during the recovery. However the Winzero solution doesn't require the server to be offline and not accessible to the users.

Winzero's ServerMigrator has addressed this issue through real-time replication that transfers the data to the new platform while the server and application remain online and available to users and then failover with minimal interruption. This process minimizes downtime for business-critical systems for disaster recovery, so why not use it for a server migration?

2. Late Night and Weekends
Get your weekends back. One of the greatest myths about server migrations is that they need to be performed during off-hours when no one is using the servers or server data that is being migrated. This is usually because the server migration can't capture changes to the data after the migration starts.

This isn't the case with asynchronous replication migration products, where data can change on the older server and replicate to the migration target server in real time. With ServerMigrator, real-time replication, migrations can be performed during normal business hours and then failed over to the target server once all the data changes have been captured and transferred to the new system.

3. P2V Conversion Process Failed
We have heard of many people complaining about the pain of the P2V (physical to virtual) process or virtual server migration they are going through, but they can't be bothered to spend a couple hundred dollars for a product that works and can make the nightmare go away.

We can't say we have much sympathy for those who try to perform mission critical functions with free tools that promise the world, but we do respect their tenacity.

4. Compatability Issuses
I hate when that happens.

There is nothing worse than getting within spitting distance of the finish line and breaking your leg. Some of the most common mistake that we have seen occur because of not preparing for the migration by reading the pre-migration checklist prior to starting the migration.

Download the Winzero Premigration Checklist with the migration product before you begin the migration.

A little planning can go along way, but having a tested process that can perform consistently and also minimize downtime will keep you from pulling out your hair.

5. Migration Succeeded but Users are Locked Out.
So, the migration's been completed, only none of the users can logon, and there begins a whole new nightmare.

There are many reasons why this happens, and it could be any combination of the factors mentioned above. Is it the free tool that was downloaded to perform the migration, the hardware being migrated, or the virtual platform? Who knows, but ServerMigrator allows you to "set and forget" and avoid this monster of user account and password conflict issues.

In summary, perform your server migration and ask what works best and what to avoid. Learn more about server provisioning or performing successful server migrations with Winzero serverMigrator or Winzero ServerMigrator Lite.

Winzero Product Demo???

2009-12-12T20:00:00.000-08:00

Winzero staff member Brian Kershaw hard at work onsite at the Microsoft Windows 7 Lounge.

WinzeroTECH demonstartes latest.... What? This is supposed to be a product demonstration

Winzero Software Error Reports

2009-10-29T12:09:00.000-07:00

Bulletin: 102909

Software Effected:
All Winzero applications and Remote Exe's

Issue:
Where can I check Winzero application errors?

Solution:
Winzero application errors are tracked in the working directory of the Winzero product installed as ProductName.log file. To maintain performance, only errors are trapped.

In the log file, unfortunately not all errors are errors… the software will report an error but the software's internal error trap will use a different process to resolve the error and the fact that the error has been resolved would not be recorded in the logfile.
However, any access denied errors are truly errors.

The log file is always written to the working directory.
The log file is rewritten everytime the Winzero application is launched.
The log file is not updated until the application is closed.

How to Uninstall Software With Winzero Schedule Service

2009-09-24T08:42:00.000-07:00

To uninstall any Winzero software application that distributes the Winzero Schedule Service, requires a three step process

1) Remove folders and files from the remote computers.
2) Remove the Scheduling Service from the remote computers
3) Uninstall the software.

Remove any Remote Files

Select the computers to remove the Winzero remote files
From the Menu select Configuration
Select Remove Remote Files...

Repeat until all remote files have been removed from all computers

Uninstall the Winzero Scheduling Service

From the Menu Configuration
Select Manage Computer Schedule Service......
From the Popup Window Select one or more computers
From the Menu Select ACTION
Select Remove Scheduling Service

Once the service removal is complete double-Click the computer name to verify the service is not installed.
Close the ScheduleManager Window

Uninstall the Winzero Application

Exit the Winzero Application
From the Start Button Select Winzero
From the flyout select Uninstall
Select one or more Winzero Applications, from the list of Winzero Applications
Click Uninstall.

Sneak Peak at Winzero's Local Account Migrator

2009-09-13T20:09:00.000-07:00

The official release date has been confirmed for Winzero's Local Account Migrator (WLAM3264) as September 30th. WLAM3264 is the worlds first migration software to support Windows 2003 and 2008 64 bit password copy.

A first look at the new WLAM3264 user interface

Click image to enlarge this image

With the release of the Winzero Local Account Migrator(WLAM3264), a Windows 32/64 bit account and password migration solution, Winzero Technologies will be the first software provider to offer a complete software solution set to migrate customers to Microsoft Windows 64 bit server platforms.

Many businesses are considering moving to Microsoft 64 bit platforms such as Microsoft Server 2008 and Microsoft Server 2003 from their current 32 bit platform.

Winzero will integrate the new 64bit password migration technology into tools designed to migrate Windows servers and migrate active directory domains.

Windows Server Migration Checklist - ServerMigrator

2009-08-24T19:02:00.000-07:00

Before beginning a server migration project, a number of mandatory prerequisites are needed to be met in order to complete a server migration successfully. These requirements are standards to meet both the requirements for Microsoft Windows server security and the Winzero ServerMigrator software.

Download the Server Migration Checklist

Active Directory Domain Migration Checklist

2009-08-18T19:47:00.000-07:00

Before beginning an Active Directory migration, a number of mandatory requirements are needed to be in place in order to complete the migration successfully. These requirements are standards to meet both the requirements for Microsoft Windows migration and the Winzero Active Directory Migrator.

Download the Domain Migration Checklist

sIDHistory Error Code 1376

2009-07-06T17:51:00.000-07:00

Bulletin: 070609

Software Effected:
WADMigrator

Issue:
When migrating sIDHistory from one domain to another, a Windows error code 1376 is generated and sIDHistory fails to complete.

Solution:
If during the sIDHistory migration process, a Windows error code of 1376 is generated, the prerequisites for sIDHistory migration have not been followed.

Error 1376 occurs when a domain local group is missing. In order to perform a successful SidHistory migration, an empty domain local group must exist in the source domain with the NetBIOS name of the domain followed by 3 "$" signs: DomainName$$$.

We would like to thank Scott Chandler and Eric Lissoy, from Far West Technology in California for bringing this issue to our attention.