Error occurred during http request {"data":"","status":0,"config":{"method":"GET","transformRequest":[null],"transformResponse":[null],"url":" 8&Culture=en-us","headers":{"Accept":"application/json, text/plain, */*"},"startTime":1446419702262},"statusText":""} Step by Step: Novell NetWare to Windows NT Migration

Step by Step: Novell NetWare to Windows NT Migration

This article was previously published under Q187789
This article has been archived. It is offered "as is" and will no longer be updated.
This article describes how to migrate accounts and resources from a NovellNetWare server to a computer running Microsoft Windows NT Server using theMigration Tool for NetWare. It also discusses the options that areavailable and how NetWare permissions and rights interoperate with WindowsNT.
The Migration Tool for NetWare (NWConv.exe) is included with Windows NTServer versions 3.51 and 4.0 and File and Print Services for NetWare(FPNW).

NOTE: Gateway Services for Netware (GSNW) must be installed on thecomputer running Windows NT Server in order for the Migration Tool forNetWare to run.

Using the Migration Tool for NetWare, you can transfer NetWare accountsand/or files and directories from NetWare volumes to a Windows NT Serverdomain controller. When you transfer users to a Windows NT domain withFPNW installed, the Maintain NetWare Compatible Login option isautomatically selected for the users.

NOTE: It is recommended that you perform the migration in two steps:

  1. Migrate user accounts.
  2. Migrate file resources.
When NetWare accounts and volume data are transferred to a computerrunning Windows NT Server, the NetWare permissions and securityinformation is also migrated, assuming NetWare file and directoryresources are transferred to NTFS volumes. Additionally, migrated volumesare automatically shared for Microsoft network client users and NetWareclients when FPNW is installed.

Starting the Migration Tool for NetWare

To start the Migration Tool for NetWare, follow these steps:

  1. In Windows NT 3.51, open Program Manager, and then click Run on the File menu. Type "NWCONV" (without quotation marks), and then click OK.


    In Windows NT 4.0, click the Start button, click Programs, click Administrative Tools, and then double-click Migration Tool for NetWare.
  2. In Select Servers For Migration, in the From NetWare Server box, do one of the following:

    Type the name of the Novell server to be migrated.


    Click the ellipses (...), and then click the appropriate Novell NetWare server to be migrated.
  3. In Select Servers For Migration, in the To Windows NT Server box, do one of the following:

    Type in the name of the Windows NT Domain Controller to which the Novell NetWare server listed above will be migrated.


    Click the ellipses (...) button, then click the appropriate Windows NT Domain name and Windows NT Domain Controller to which the Novell NetWare server listed above will be migrated.

    NOTE: The computer running Windows NT Server that you select must be a Domain Controller.

Overview of Migration Tool for NetWare Dialog Buttons

 ADD            : This option allows you to migrate multiple servers at                  the same time. DELETE         : This option removes the selected NetWare and Windows                  NT Servers currently selected in the Server for                  Migration list. USER OPTIONS   : This option is used to specify how the migration will                  affect each user account and group. FILE OPTIONS   : This option is used to determine which folders and/or                  files are migrated to the computer running Windows NT                  Server, and to specify the new location for these                  resources. START MIGRATION: This option begins the migration. This actually brings                  information over from the NetWare server. TRIAL MIGRATION: This option starts a rehearsal migration. The benefit of                  this option is that it behaves just like the real                  migration would, except that it does not actually                  perform the migration. You can analyze error logs after                  a trial migration and make any corrections before doing                  the real migration. LOGGING        : Specifies error login detail level.

NOTE: The Error.log, Summary.log, and Logfile.log files are located in the%systemroot%\system32 directory.

Details of the User Options Button


Use this section to determine the passwords for the migrated accounts.

NOTE: Make sure that the password option you select conforms to thepassword policy set in User Manager for Domains; otherwise, errors mayoccur when you perform the migration.


Use this section to specify the action to be taken when a duplicateaccount name is found in the Windows NT domain being migrated to.

Group Names

Use this section to specify the action to be taken when a duplicate groupname is found on the Windows NT domain being migrated to.


Use this section to specify account policies to be used and whether or notNetWare Supervisor rights should be transferred to the Windows NT domain.

NOTE: The Migrate NetWare Specific Account Information option on theDefaults tab is only available if File and Print Services for NetWare(FPNW) is installed on the computer from which you are running theMigration Tool for NetWare.


Click the Advanced button to specify a trusted domain that you want tomigrate users to.

Transfer Users and Groups

When this check box is selected, the tool transfers NetWare-specificaccount information including grace logins, limiting concurrentconnections, and station restrictions.

NOTE: User disk volume restrictions are not supported, nor are theytransferred. Also, when transferring NetWare accounts, new passwords mustbe set for the accounts because Windows NT cannot read users' passwords,as they are stored in encrypted form.

Use Mappings in File

When this option is selected, the mapping file specifies how accountinformation is transferred to Windows NT. The mapping file will onlytransfer those user accounts and groups that are included in the mappingfile.

You can create a new mapping file, or edit an existing file when youtransfer user or group account information. The mapping file also has acomma-delimited format that makes it easier to transfer the informationinto a spreadsheet. The format is as follows:

<old name>, <new name>, <password>

When you create a new mapping file, it is created as a text file and isautomatically stored in the %SystemRoot%\System32 folder as a *.MAP file.

To create a mapping file when you transfer accounts, follow these steps:

  1. In the Migration Tool for NetWare, click User Options.
  2. In the User and Group Options dialog box, click the Use Mappings in File check box to select it, and then click Create.
  3. In the Create Mapping File dialog box, type a name for the mapping file in the Use Mappings in File field.

    NOTE: You can also click the ellipses (...) button to browse for a file.
  4. Click to select the Include User Names check box to include user names in the mapping file.
  5. Click to select one of the following password options:

    • No password: User accounts are transferred with a blank password.
    • Password is Username: The new password is the same as the user name.
    • Password is <field>: The text entered here is used for all passwords.
  6. To include group names in the mapping file, click the Include Group Names check box to select it.
  7. Click OK, and you should receive the following message:

    Mapping file created successfully. Do you want to edit it?
NOTE: Clicking Yes opens the mapping file in Notepad.exe and allows you toremove user accounts that you do not want transferred by deleting thoseuser names. You may also change users' names and passwords, as needed.

Details of the File Options Button

Clicking File Options in the Migration Tool for NetWare allows you tocustomize what resources, such as files and folders, are to be migrated.

Transfer Files

In the upper left-hand corner is a check box for the Transfer Filesoption. If you click to clear this check box, the migration processmigrates only user groups and individual users. No directories or filesfrom the NetWare server are migrated. Therefore, to ensure files migratefrom NetWare to Windows NT, do not click this check box to clear it.

Below the Transfer Files check box is a double-column list box. On theleft side is the NetWare server from which information will be migrated.On the right side is the computer running Windows NT Server to which theinformation will be migrated.
 ADD   : This button allows you to select NetWare volumes to migrate.         Because all volumes are selected for migration by default, this         button is unavailable unless a volume has been previously         deleted. DELETE: This button deletes the currently selected NetWare volume and         Windows NT Server share that is highlighted in the list. MODIFY: This option allows you to modify the location where resources         will be located on the computer running Windows NT Server. Also,         a new share can be created in this dialog box. FILES : This option allows you to selectively pick which files and         folders are to be migrated.

Security: NetWare Migrated to Windows NT

When the NetWare volumes are migrated to a computer running Windows NTServer, permissions on files and folders are only preserved if the volumeis migrated to an NTFS volume.

In NetWare, a user with explicit trustee rights to a low-level folder inthe tree is automatically allowed read and file scan access to foldershigher than that low-level folder, even if they are not given trusteerights to do so. However, Windows NT Server enforces security at everyfolder level. On a computer running Windows NT Server, if a user has nopermissions for a high-level folder, then the user cannot access thatfolder or see its contents.

So that NetWare users do not lose the ability to browse the tree if theyhave permissions on lower-level folders, the Migration Tool for NetWarechecks whether trustee rights are set at the root of the NetWare volumebeing transferred. If there are no trustee rights set at that level, thenthe Migration Tool for NetWare grants the Domain Users group the ReadExecute (RX) permissions for every folder of the transferred volume,allowing users to browse the volume.

If you want to change these permissions after the volume has beentransferred, you should use the CACLS tool. Using CACLS, you canuse a single command to revoke the permissions granted to Domain Usersthroughout the tree, without altering any other permissions granted at anylevel in the tree.

To use CACLS to revoke the permissions of Domain Users for all folders inthe volume, change to the root of the volume and type the followingcommand:

CACLS /T /E /R "domain users"

In this command, the /T switch specifies to revoke the permissions forevery subfolder of the current folder, the /E switch specifies to notchange permissions granted to other groups or users in those folders, andthe /R "domain users" switch revokes the permission granted to domainusers.

Permissions: NetWare Migrated to Windows NT

The individual permissions (and their abbreviations) are:
Read (R)
Execute (X)
Change Permissions (P)
Write (W)
Delete (D)
Take Ownership (O)

Directory Permission Explanation

 No Access             User cannot access the directory in any way, even                       if the user is a member of a group that has been                       granted access to the directory. List (RX)             User can only list the files and subdirectories in                       this directory and change to a subdirectory of this                       directory. User cannot access new files created in                       this directory. Read (RX)             User can read the contents of files in this                       directory and can run applications in the                       directory. Add (WX)              User can add files to the directory but cannot read                       or change the contents of current files. Add & Read (RWX)      User can add files and change the contents of                       current files. Change (RWXD)         User can read and add files and change the content                       of current files. Full Control (All)    User can read and change files, add new ones,                       change permissions for the directory and its files,                       and take ownership of the directory and its files.

Directory Rights

NetWare Directory RightsCorresponding Windows NT Directory Permissions
Read (R) Read (RX)
Write (W)Write (W)
Create (C)Write (W)
Erase (E)Delete (D)
Modify (M)Write (W)
File Scan (F)Read (R)
Access Control (A)Change Permissions (PO)
The next table shows how rights set using Windows NT are mapped forNetWare clients:

Windows NT Directory Permissions Corresponding NetWare Directory Rights

Windows NT Directory PermissionsCorresponding NetWare Directory Rights
List (RX)Read, File (RF)
Read (RX)Read, File (RF)
Add (WX)Write, Create, Modify (WCM)
Add & Read (RWX) Read, Write, Create, Modify, File Scan (RWCMF)
Change (RWXD)Read, Write, Create, Modify, File Scan (RWCMF)
Full Control (All)Supervisor (S)

File Rights

NOTE: The Windows NT operating system does not support the Create (C) andFile Scan (F) rights for files, but Windows NT does assign thesepermissions at the directory level, as shown in the previous table.
NetWare File RightsCorresponding Windows NT File Rights
Supervisory (S)Full Control (All)
Read (R)Read (RX)
Access Control (A)Change Permissions (PO)
Create (C)Write (W)
Erase (E) Delete (D)
Modify (M)Write (W)
Write (W) Write (W)

The following table shows how file rights are mapped from Windows NTServer to Novell NetWare:
Windows NT File PermissionsCorresponding NetWare File Rights
Read (RX)Read, File (RF)
Change (RWXD)Read, Write, Create, Modify, File Scan(RWCMF)
Full Control (All)Supervisor (S)

File Attributes

Both NetWare and Windows NT operating systems have assignable fileattributes. The following table shows how file attributes are mappedbetween the NetWare and Windows NT operating systems:

NetWare File Attributes Windows NT File Attributes

 NetWare File Attributes   Windows NT File Attributes ---------------------------------------------------------------------- Read Only (Ro)            Read Only (R) Delete Inhibit (D)        Read Only (R), or remove user permissions to                           delete the file. Rename Inhibit            This is assigned at the directory level by                           removing user permissions to write to the                           directory. Archive Needed (A)        Archive (A) System (Sy)               System (S) Hidden (H)                Hidden (H) Execute Only (X)          Execute (E). On Windows NT, the execute                           attribute can be reset by the administrator. Read Audit (Ra)           Audit Read, Audit Execute. These are fully                           supported. Write Audit (Wa)          Audit Write, Audit Delete. These are fully                           supported.
nwconv convert

Article ID: 187789 - Last Review: 10/09/2013 17:33:57 - Revision: 1.1

  • Microsoft Windows NT Server 3.51
  • Microsoft Windows NT Server 4.0 Standard Edition
  • kbnosurvey kbarchive kbfaq kbinfo KB187789