Configuration Manager 2007 to 2012 Migration

May 6th, 2013 | Posted by Justin Chalfant in Migration


In this post, I’m going to do a walk-through of setting up a migration from Configuration Manager 2007 to Configuration Manager 2012 and the process to migrate a package.

Lab Environment

CM07.CONTOSO.LOCAL = My Configuration Manager 2007 Site Server and database

CM12.CONTOSO.LOCAL = My Configuration Manager 2012 Site Server and database

I will be using the computer account of my Configuration Manager 2012 site server for the migration account. You could use a regular domain account but best practice is to delegate the computer account of the CM12 site server for the migration.

Things to know before starting:

Source Site Account: This account is used to access the SMS Provider of the source site.

  • For a Configuration Manager 2007 SP2 source site, this account requires Read permission to all source site objects.
  • For a System Center 2012 Configuration Manager source site, this account requires Read permission to all source site objects.

Source Site Database Account: This account is used to access the SQL Server database of the source site and requires Read and Execute permissions to the source site database.

When gathering data, the following network protocols and ports are used:

  • NetBIOS/SMB – 445 (TCP)
  • RPC (WMI) – 135 (TCP)
  • SQL Server – 1433 (TCP)

Verity these ports are opened for the SQL server the CM07 site is running on.

Performing the Migration:

The first thing I’m going to do is delegate the computer account of CM12.CONTOSO.LOCAL read permissions to the CM07 site this will be used for the “Source Site Account”. You can use any domain account as the “Source Site Account”, but it is considered best practice for security to use the computer account of the CM12 site server.

In the CM07 console, navigate to Site Database > Security Rights > Users > Right Click Manage ConfigMgr Users and follow the wizard.

In the user name, add the computer account of the CM12 site server:

Image 001

Next we need to give the CM12 site server computer account the required permissions to migrate data.

I will give the computer account read permissions to the CM07 site (NOTE: If you plan to perform DP Sharing / Upgrade you should add modify & delete).

Image 002

I Also gave the computer account Read permission to Packages (NOTE: This account will need read permission for each object type you want to migrate. For example: Collection, Operating System Images etc. In my case I’m only going to migrate Packages so read rights on packages will work for this migration).

Image 010

Next thing we need to do is give the CM12 computer account a login into the CM07 database using SQL Management Studio.

Image 004

Now we will set the required permissions for the new login account

Image 005

The above steps will give the computer account to minimum permissions to migrate data from our CM07 to our CM12 site.

Now we will need to setup the migration in out CM12 configuration manage console:

Image 006

Everything should go through just fine…. Hopefully :)

Image 007

Now that you have successfully gathered data from our CM07 heirachy you will need to create a migration job (This is what actually will bring objects from the CM07 site to the CM12 Site). I will show how to create a migration job that will migrate a package.

Image 008

 Choose the package(s) and other objects you want to migrate. You can also migrate package(s) using the collection migration and have the option to migration collections and advertisements related to the package but in this case I only wanted to migrate the package.

Image 009

 Click next on the Assign ownership (If using a CAS you could select the site you want to assign ownership to)

If you have custom security scopes you can assign it in the Security Scope wizard (or create one) in my case I choose the default:

Image 006

In the settings, you can select when you want the migration to run. In my case, I left the default to run now.

Image 003

Completion Wizard should appear!

Image 004

Verify the job actually ran successfully

Image 22

Your migrated objects will show up in your CM12 site:

Image 23



You can follow any responses to this entry through the RSS 2.0 You can skip to the end and leave a response. Pinging is currently not allowed.

2 Responses

  • Shaun Hanisch says:

    Good Post – Just remember if you are moving packages from the old 2007 server to the 2012 server that the Package Source location will not update. You will need to perform this manually on each package that is migrated to the new server or ideally host the packages on a DFS.

    • Justin says:

      Thanks! Correct the source location doesn’t change that is by design. That’s why it’s important to make sure all packages are referencing UNC paths for the package source location rather than a local disk on the DP server.


Leave a Reply

Your email address will not be published. Required fields are marked *

* Copy This Password *

* Type Or Paste Password Here *

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>