” I’ve written a script to update the users so they show in the SBS Console.”
Script courtesy of Jake Paternoster


I’ve edited off the script and I’ll tell you why.
The issue is that while the script may help in one way, it does not stamp the SBS users so that it will ensure they have the quotas, mailboxes and security group membership that they need for sending faxes and what not.  So to ensure that the SBS users are properly set up, please follow the official instructions in the migration documentation.
(Thanks for understanding the concern and the reason for the edit)

3 Responses to Showing the migrated users in the SBS 2008 console

  1. Chris Knight says:

    Any script that helps set the msSBSCreationState attribute is useful, in much the same way that ADRestore is a useful utility to reanimate Active Directory objects that have been deleted. It seems a bit schizophrenic that there are wizards for a whole heap of other things except this. People who don’t know what they’re doing and people who think they know what they’re doing (this includes me!) really shouldn’t be stuffing around with ADSIEdit at any time.

    So long as the script terminates by shouting loudly “YOU MUST NOW RUN THE CHANGE USER ROLE WIZARD FOR THE MODIFIED USERS”, then all is well.

  2. Darren says:

    Where can I find this script? I have migrated users from SBS2003 to SBS2008 and none of them show up in the SBS2008 console.

  3. bradley says:

    Change user account roles
    Before you migrate user accounts, you can create custom roles by using the Add a New User Role Wizard. You can then use the new user role when you migrate the user accounts to the Destination Server.

    To migrate user accounts

    In the Migration Wizard, on the Migration Wizard Home page, click Migrate users and groups, and then click Next.

    On the Migrate groups page, click Next.

    On the Migrate user accounts page, click Run the Change User Role Wizard.

    On the Select new user role page, select the type of user role that you want the user account to have in Windows SBS 2008, and then choose how you want to apply the permissions and settings.

    Either you can replace any permissions or settings that are granted to the user account, or

    You can add the Windows SBS 2008 permissions and settings where applicable.

    Click Next.

    On the Select user accounts page, choose the user accounts to apply the role type to, and then click Next.

    To view the user accounts that were migrated from the Source Server, in the Users list view, click the Display all the user accounts in the Active Directory check box.

    When the wizard finishes, click Finish. The user account role type is changed to the role type that you selected.

    Repeat steps 3 through 6 until you apply permissions and settings to all user accounts that were migrated.

    When the you finish applying permissions and settings to all user accounts, click Task complete, and then click Next.

    By default, user accounts that were migrated from the Source Server do not need to meet the Windows SBS 2008 password policies, which are applied to new user accounts in Windows SBS 2008. When a user with a migrated user account resets or changes their password, they are required to meet the Windows SBS 2008 password policy. If the Windows SBS 2008 password policy is changed to make it stronger (for example, more complex or longer password length), all users, including users with migrated user accounts, are required to reset their passwords to meet the new password policy.

    To help secure your network, it is recommended that you delete the STS Worker, SBSBackup, IUSR_SBS, and IWAM_SBS user accounts and any other user account or group that is not used.