🔄 Easy Active Directory Migrations: CopyRight2

Q: What types of Active Directory objects does it migrate?

CopyRight2 can migrate users, contacts, groups (global, local, universal), distribution lists, members, OUs and optionally object permissions (ACL). You can define which attributes you want to migrate per object type. For extensibility you can define small scripts to transform objects during the migration.

CopyRight2 is a market-leading Active Directory migration tool for Windows Server environments. Active Directory Domain Services (AD DS) stores information about users and devices in Active Directory databases and helps enforce security, access control and access to network resources for authorized users.

Designed for Windows domain networks, CopyRight2 helps you migrate users, groups, contacts, OUs, distribution lists, passwords, user and computer objects, group memberships and object permissions from an existing AD environment to a new domain, within the same forest or across different forests.

Users

Migrate user accounts including passwords (NT hash + optionally AES/RC4 Kerberos keys).

Groups

Migrate local, global and universal group objects including group members.

Contacts & Distribution Lists

Migrate contacts and distribution lists including their members.

Computers

Migrate Windows® user profiles and computer accounts to another Active Directory domain or Microsoft Entra ID joined state.

OUs

Optionally migrate organizational units (OUs) and the OU hierarchy from the source to the target domain.

Object Permissions

Migrate object permissions along with the objects.

Free Trial Watch Video

CopyRight2 Advantages

CopyRight2 is a lot easier to use and does not have the complexity and overhead of other solutions. Watching the 12 minute video below explains the migration process and shows how to perform AD migrations. CopyRight2 does not require a trust between source and target domains. Neither does it require any agents that have to be installed, nor does it require an SQL server instance.

Tutorial Video

Optional sidHistory Support

CopyRight2 supports sidHistory migration for intra-forest and inter-forest migration scenarios, including cross forest domain migrations, but doesn’t require it. When enabled, it migrates source account SIDs to the target account’s sidHistory attribute, temporarily granting resource access. This allows independent migrations of accounts, resources and computers. Post-migration, sidHistory can be cleaned up during or after data transfer, with CopyRight2 simplifying the process.

Intra-Forest Domain Migration

CopyRight2 supports account migrations between domains residing in the same forest.

Inter-Forest Domain Migration

It also supports migrations of accounts between domains residing in different forests.

Support for Delegated Admins

CopyRight2 supports sidHistory and allows delegated administrators in the target domain to manage sidHistory entries selectively. They can add sidHistory to objects they manage without needing access to sidHistory of other objects.

Compatible Active Directory Versions

CopyRight2 supports Active Directory from Windows® 2000 to 2025, Azure® Entra Connect (formerly AD Connect), AWS® Directory Service, Synology® Directory Server and Univention® UCS. Each can be used as a source or target directory.

Migration of NTFS and Share-Level Permissions

Share and NTFS-level Permissions

Using CopyRight2, you can replace the source accounts in file share and NTFS permissions with those migrated to the target domain. Either on-the-fly while copying data or in-place if the data should remain in the current location.

Single Step Approach

You can migrate domain accounts automatically during the data migration. CopyRight2 will then migrate any accounts having either direct or indirect permissions granted in NTFS or share level permissions.

Multiple Steps Approach

Additionally you can run a separate job migrating Active Directory objects in a first step. Next you can run the data migration in a second step. Running the account migration separately from the resource migration provides you with more control over the process.

Migrate From Other Domains, Domain Members and Workgroup Systems

CopyRight2 fully supports all Active Directory group types, including local, global, universal, security and distribution list groups. It also migrates local accounts between domain member computers, workgroup systems and domains.

Easy Deployment

CopyRight2 can be installed on any suitable Windows computer, preferably a server in the source or destination domain. It supports older and newer Windows Server operating systems and allows you to run or schedule AD migration tasks as needed.

24/7 Support and 2 Years of Free Updates / Upgrades

In case there is a problem using the software, you can contact Sys-Manage's support at any time. Our experienced support engineers have helped thousands of customers to complete their projects successfully. You can contact us at any time using email or by telephone.

Multiple Account Selection Options

Select Objects To Migrate in High Resolution

An Active Directory administrator can easily select the AD objects to migrate from the source domain's Active Directory tree.

Alternatively, you can migrate all items to the new domain, use a CSV file, or apply Lightweight Directory Access Protocol (LDAP) query filters.

Define Active Directory Attributes to Copy

CopyRight2 Active Directory Attribute Settings

CopyRight2 lets you choose which attributes to copy based on object type using its attribute in- and exclusion list.

Migrate OU and Container Hierarchy

CopyRight2 Active Directory OU Settings in High Resolution

Using CopyRight2, you can migrate accounts to the default 'Users' container or a specified container.

If enabled, the original OU hierarchy will be preserved and copied below the chosen target OU.

Transfer Active Directory Object Permissions

CopyRight2 Object Security Settings in High Resolution

CopyRight2 can migrate permissions on any Active Directory objects, including users, groups, contacts, distribution lists, OUs, and containers.

It transfers access permissions defined by DACLs, auditing settings defined by SACLs and ownership details.

Schedule Jobs For Background Execution

Copyright2 Task Scheduler Settings in High Resolution

You can schedule any jobs to run automatically in the background at specified intervals.

Receive email notifications for the job in case of success and/or error.

Customize and Transform Objects

Copyright2 Active Scripting Settings in High Resolution

You can define scripts for each object type, such as users. The script runs when you migrate an object of that kind, allowing you to easily adjust attribute values.

You can use this VBScript code to add 'PREFIX_' to a migrated object's 'samAccountName' attribute:

Destination("samAccountName")="PREFIX_" & Source("samAccountName")

Use the Windows® SID-HISTORY Feature

Interforest migrations: Clone source accounts in the target domain and set sidHistory to the corresponding source SID.

Intraforest migrations: Accounts will be moved between the domains instead. The sidHistory attribute automatically gets set to the corresponding SID of the original account.

You can find more information about using the Active Directory sidHistory attribute in the CopyRight2 Documentation.

Account and Data Migration Without sidHistory

It is, however, not a requirement to use the sidHistory attribute with CopyRight2. Copy user and group accounts directly. Change NTFS and file share permissions while copying data or modify them in-place without transferring the data.

Frequently Asked Questions

What types of Active Directory objects does it support?

CopyRight2 migrates users, contacts, groups (global, local, universal), distribution lists, members, OUs and optionally object permissions (ACL). You can define which attributes to transfer per object type. For extensibility you can define small scripts to transform objects during the migration.

Does it require a trust?

No, it does not require a trust between domains. It works though if a trust is in place, but it is not a requirement. You can also copy objects from a member or workgroup mode system to a domain with it.

Does it support sidHistory?

Yes, it does. SidHistory requires several prerequisites, including a trust. Once these requirements are fulfilled, using sidHistory is easy and only requires checking a checkbox.

For more details, consult the CopyRight2 documentation.

If migrating without sidHistory, use a Data Migration job to copy data and replace accounts. If data stays in place, a Security & Attributes job can adjust permissions.

Do You Have Any Questions or Suggestions?

In case of any questions or suggestions, please feel free to contact us at support@sys-manage.com. We like hearing from you.

Migration Solutions

Migration Add-ons

Freeware Tools

Archived Products

CopyRight2 Active Directory Migration Features