Re: 5.5 --> 2003 migration, No SID history

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Kevin O'Brien (kevin.obrien_at_henryschein.com)
Date: 10/12/04 

Date: Tue, 12 Oct 2004 08:56:30 -0400

Hi Colby,

I can not delete the accounts they already created because the users have
been using these accounts for some time. If I deleted them they would lose
their rights to all their file shares and even the 5.5 mailbox that the
account is associated with as the primary NT account.

If I could merge the SIDs that would be great. Can this ADClean merge the
NT 4.0 and Win2003 accounts?

Thank you,

Kevin

"Colby Holland [MSFT]" <colbyh@online.microsoft.com> wrote in message
news:#muwOl9rEHA.3900@TK2MSFTNGP10.phx.gbl...
> Sorry! Mistyped the name of that tool. It's not ADPlus. =) I meant to
> write ADClean:
>
> 287995 XADM: Merging Disabled User and Enabled User by Using the ADClean
> Tool
> http://support.microsoft.com/?id=287995
>
> Colby
>
> --
> Please do not send e-mail directly to this alias. This alias is for
> newsgroup purposes only.
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Colby Holland [MSFT]" <colbyh@online.microsoft.com> wrote in message
> news:uqffXh9rEHA.1388@TK2MSFTNGP09.phx.gbl...
> > You can delete the accounts they've already created, and just let the
> > recipient CA do the job for you after you set up the ADC. Then the new
> > disabled AD accounts will have their NT counterparts as an associated
> > external account. At some point down the line you can merge the two
using
> > ADPlus, thus preserving SID history.
> >
> > Colby
> >
> > --
> > Please do not send e-mail directly to this alias. This alias is for
> > newsgroup purposes only.
> >
> > This posting is provided "AS IS" with no warranties, and confers no
> > rights.
> >
> >
> > "Kevin O'Brien" <kevin.obrien@henryschein.com> wrote in message
> > news:O6xda08rEHA.376@TK2MSFTNGP14.phx.gbl...
> >> Hello,
> >>
> >> I have a question I hope one of you can help me with. I have been
asked
> >> to
> >> perform an Exchange 5.5 to 2003 migration. Unfortunately the company
> >> has
> >> already manually created all of the user accounts and they did not use
a
> >> migration tool to preserve sid history. I can not redo it because this
> >> was
> >> done some time ago and the users are using all of these newly created
> >> accounts. My question is does anybody know of a way to migrate the
> >> mailboxes without sid history?
> >>
> >> Thank you,
> >>
> >> Kevin
> >>
> >>
> >
> >
>
>

Relevant Pages

  • Re: Exchange 5.5 to 2003 migration questions
    ... That usually means you do not have the correct accounts listed on the ... So if you brought up AD Users and Computers from the Exchange server you ... This posting is provided "AS IS" with no warranties, and confers no rights. ...
    (microsoft.public.exchange.admin)
  • Re: help with setting up File Access Rights in Windows 2003
    ... > I need to allow access to Accounts to the Accounts Team and so on. ... > I set up a security group called Accts and pulled the 2 accts people ... > rights and assigned Full rights to the administrator and the Accts ... > If however I allow inherited rights from above, ...
    (microsoft.public.win2000.security)
  • Re: Security Additions Disappearing
    ... Are the delegate accounts in AD? ... There is a known case where permissions get reset. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... this Support account is only a member of Domain ...
    (microsoft.public.exchange2000.admin)
  • RE: Permissions problem
    ... Please try to add the new Technician account to the following accounts. ... This posting is provided "AS IS" with no warranties, and confers no rights. ... >Bob Qin ... >Microsoft Online Partner Support ...
    (microsoft.public.windows.server.migration)
  • Re: Scripting mailbox creation
    ... >>confers no rights. ... >If the accounts aren't created then CSVDE is an option ...
    (microsoft.public.exchange.admin)