Your Windows 2000 forest contains the domains acme1.com and acme2.com. You want to move the existing Philadelphia organizational unit (OU) from the acme1.com domain to the acme2.com domain while preserving its users and groups. Which command line tool should you use to move this OU between domains?

Difficulty: Medium

Correct Answer: MoveTree.exe

Explanation:


Introduction / Context:
In Windows 2000 Active Directory, it is sometimes necessary to restructure your directory by moving organizational units (OUs) and their contents between domains in the same forest. This process is called an interdomain move. Microsoft provides a specific command line tool that supports moving entire OUs, including users and groups, across domains without having to recreate them manually.


Given Data / Assumptions:

  • The forest contains at least two domains: acme1.com and acme2.com.
  • You have an existing OU named Philadelphia in the acme1.com domain.
  • You want to move the Philadelphia OU into the acme2.com domain.
  • The move should preserve objects such as user and group accounts.


Concept / Approach:
Windows 2000 includes the MoveTree utility for restructuring Active Directory between domains in the same forest. MoveTree.exe supports moving OUs, as well as individual users and groups, from one domain to another, while retaining security identifiers where possible. Standard command line tools like the generic move command are used for file system operations, not directory objects. Graphical tools such as Active Directory Domains and Trusts manage trust relationships but do not perform cross domain moves of OUs.


Step-by-Step Solution:
Step 1: Identify the type of operation. You are performing an interdomain move of an OU within a single Active Directory forest.Step 2: Recall the Microsoft utility specifically designed for Active Directory restructuring. MoveTree.exe is included with Windows 2000 support tools for this purpose.Step 3: Recognize that the standard move command deals only with file and directory movement at the file system level, not with Active Directory OUs.Step 4: Note that Server Extensions Administrator is not a standard Windows 2000 Active Directory tool for moving OUs.Step 5: Understand that Active Directory Domains and Trusts is used to create and manage trust relationships between domains, and does not move OUs between domains.Step 6: Conclude that MoveTree.exe is the correct tool to move the Philadelphia OU from acme1.com to acme2.com.


Verification / Alternative check:
Official documentation and MCSE study materials describe MoveTree.exe as the supported mechanism for moving OUs between domains in Windows 2000. Sample commands demonstrate specifying a source domain, destination domain and the distinguished names of the OU to be moved. No other built in graphical tool supports this type of cross domain OU relocation, which reinforces the conclusion that MoveTree.exe is required for this scenario.


Why Other Options Are Wrong:
The generic move command line utility operates on files and folders, not Active Directory objects. Server Extensions Administrator is not an Active Directory restructuring tool. Active Directory Domains and Trusts helps you define trusts and manage domain wide settings but cannot move OUs from one domain to another. Therefore, these alternatives do not meet the needs of the question.


Common Pitfalls:
Administrators sometimes assume that they can drag and drop an OU between domains using a graphical console, but Windows 2000 does not support this directly. Others forget that cross domain moves require special planning, including permissions and possible password issues for user accounts. Relying on the correct tool, MoveTree.exe, reduces the risk of data loss and ensures that the move is logged and controlled.


Final Answer:
The correct tool to move the Philadelphia OU between the acme1.com and acme2.com domains is MoveTree.exe.

More Questions from Microsoft Certification

Discussion & Comments

No comments yet. Be the first to comment!
Join Discussion