Re: Inter Forest Migration & SidHistory PB

Hello All,
Thank you Jorge for your help.
My problem was the SID Filtering & the trust relation ship.
In AD2003 SID Filtering is applied by default
You will find lot of information there :

http://www.microsoft.com/technet/prodtechnol/windowsserver2003/library/Operations/52b395b4-0313-47d8-87d4-fb1dd4d5c470.mspx

Thanks
remi

"Jorge de Almeida Pinto" wrote:

> although you may have added the target domain admins to the source
> administrators you still do not have admin permissions on workstations and
> servers.
>
> Create a domain local group in the source, add domain admins from the target
> to it. Add the domain local group in the source to the local administrators
> of each workstation/server in the source you want to migrate or you the
> restricted groups feature in a GPO to do that automatically
>
> --
>
> Cheers,
> (HOPEFULLY THIS INFORMATION HELPS YOU!)
> # Jorge de Almeida Pinto #
> BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx
> -----------------------------------------------------------------------------
> * This posting is provided "AS IS" with no warranties and confers no rights!
> * Always test before implementing!
> -----------------------------------------------------------------------------
>
>
> -----------------------------------------------------------------------------
> "Rémi" <remix19@xxxxx> wrote in message
> news:A19A1438-9EBD-47F8-9530-8C17DA3E2589@xxxxxxxxxxxxxxxx
> > Hello everybody,
> >
> > I'm having a serious migration problem between 2 AD2003 Domain.
> > My source domain is 2003 & my target domain is 2003.
> > I've installed ADMT V3 & PES
> > registry, rights for accounts that lauch admt etc are OK
> > All Is working totaly good when I migrate an account or a groups (machine
> > not tried yet)
> > The migrated account is good, good password & the sid from source domain
> > is
> > in SidHistory & the groups that had the account are also migrated...SO All
> > good you will say !
> >
> > Yes...but no
> >
> > When I try to access to any ressources on the source domain I'm having an
> > access denied.
> > It's the first time that I'm migrating AD2003 --> AD2003
> > In NT --> 2000 or NT --> 2003 All was always totaly good.
> > Maybe I'm missing something stupid...If you have any idea or clue...
> >
> >
> > Thank you very much
> >
> > Best regards
> > remi
> >
>
>
>
.

Relevant Pages

  • Re: Inter Forest Migration & SidHistory PB
    ... administrators you still do not have admin permissions on workstations and ... Create a domain local group in the source, add domain admins from the target ... > All Is working totaly good when I migrate an account or a groups (machine ...
    (microsoft.public.windows.server.active_directory)
  • Re: Inter Forest Migration & SidHistory PB
    ... forest trusts (what the article says about sid filtering being enabled on ... >> Create a domain local group in the source, add domain admins from the ...
    (microsoft.public.windows.server.active_directory)
Loading