Directory Services Migration Tool in Windows 2000

The Directory Services Migration Tool (DSMT) in Microsoft Windows 2000 is a specialized utility designed to simplify and automate the migration of network resources from Novell NetWare environments to Windows 2000 Active Directory. This article details the primary functions of the tool, its offline modeling capabilities, and how it handles user accounts, file systems, and security permissions during enterprise directory transitions.

Primary Function and Purpose

The primary function of the Directory Services Migration Tool is to transition directory objects and data from Novell NetWare 2.x, 3.x (Bindery-based) and 4.x/5.x (NetWare Directory Services/NDS) into native Windows 2000 Active Directory. Prior to this tool, moving between disparate network operating systems required extensive manual administrative overhead or fragmented third-party utilities. DSMT acts as a centralized administrative interface within the Microsoft Management Console (MMC) to bridge this gap.

Key Capabilities

• Offline Modeling and Simulation: One of the most critical functions of DSMT is its ability to extract source NetWare directory data and create an offline representation. Administrators can design, restructure, and map the destination Active Directory hierarchy—such as Organizational Units (OUs) and security groups—without altering the live NetWare environment or making immediate changes to the production Active Directory.
• Account and Group Migration: The tool reads user accounts, group memberships, and administrative structures from NDS or Bindery databases. It maps these elements directly to corresponding Active Directory user accounts and security groups, allowing administrators to establish migration rules and resolve naming conflicts before execution.
• File System and Permission Transfer: In addition to directory objects, DSMT facilitates the migration of files and folders stored on NetWare volumes to Windows 2000 NTFS partitions. During the transfer, the tool translates NetWare trustee rights into equivalent Windows 2000 NTFS Access Control Entries (ACEs) to preserve data access integrity.
• Password and Security Handling: Because encrypted NetWare passwords cannot be directly exported into Windows 2000, DSMT provides mechanisms to manage credential generation. Administrators can assign blank passwords, generate random passwords, assign a single default password, or require users to change their passwords immediately upon their initial logon to the Windows domain.
• Staged Implementation: The tool supports phased migrations. Network teams can migrate select departments, servers, or functional units independently, verifying data integrity at each stage before decommissioning legacy NetWare hardware.