Re: Migrating accounts nt4 to 2k3 and SIDs

Tech-Archive recommends: Fix windows errors by optimizing your registry



I still have not had any luck getting SID history to work. I remigrated all
of the groups. I don't think I've been distinguishing between global or
local. I just start the ADMT and select "Group Account Migration Wizard" and
then select all of the groups that appear.

I also definitely have selected the option to migrate users and fix group
membership.

Anything else that I could check? Or something else I could be missing?

Thanks

"Jorge de Almeida Pinto [MVP]" wrote:

to my knowledge there is no need to disable SID filtering on the outgoing
trust side because on that side is the NT4 side and SID filtering is
disabled by default on the NT4 side

Have you:
* Migrated global groups with sid history
* Migrated users with sid history and fixing group membership
* Migrated local groups with sid history and fixing group membership

and if your users logon with the new account it should work after doing
these steps

for exchange you need to setup the ADC so that exchange 5.5 syncs with AD
and mail enables the AD accounts. After that you can move the mailboxes over
to AD and so some other exchange related stuff

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"Jorge de Almeida Pinto [MVP]"
<SubstituteThisWithMyFullNameSeparatedByDots@xxxxxxxxx> wrote in message
news:%23F$KM7BsGHA.1192@xxxxxxxxxxxxxxxxxxxxxxx
have you also migrated the groups with sidhistory and group memberships?

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no
rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
"CGeneva" <CGeneva@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:CAAC0E83-C503-46F2-88CC-EA0A6F7D7BE9@xxxxxxxxxxxxxxxx
I'm in the process of migrating my accounts between an NT4 domain and a
2k3
AD. I have a trust set up and I've turned off SID filtering. How do SID
histories work with my user accounts. When I migrate user accounts and
groups to the 2003 AD should they still have access to all the resources
on
the NT4 domain?

What I'm trying to prevent is having to readd all the newly created AD
groups to resources in the NT4 domain.

Can anyone push me in the right direction for how I can accomplish this
with
SID histories or what I'm missing? After I moved the user accounts with
SID
history I'm not able to access the old NT4 resources.

Thanks.





.



Relevant Pages

  • Re: Migrating accounts nt4 to 2k3 and SIDs
    ... the ADC so I can't redo it. ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Migrated users with sid history and fixing group membership ... histories work with my user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migrating accounts nt4 to 2k3 and SIDs
    ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... Migrated users with sid history and fixing group membership ... and mail enables the AD accounts. ... histories work with my user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: workstations migration from NT4 to Windows 2003
    ... inability to modify the profile if its locked, and its locked when the user ... We will use ADMT 3 to migrate our computers, ... We don't want to mess up the existing user accounts ... confusing with the SID history, it related to user accounts or computer ...
    (microsoft.public.windows.server.migration)
  • Re: Migrating accounts nt4 to 2k3 and SIDs
    ... trust side because on that side is the NT4 side and SID filtering is ... Migrated users with sid history and fixing group membership ... BLOG --> http://blogs.dirteam.com/blogs/jorge/default.aspx ... histories work with my user accounts. ...
    (microsoft.public.windows.server.active_directory)
  • Re: workstations migration from NT4 to Windows 2003
    ... We will use ADMT 3 to migrate our computers, ... We don't want to mess up the existing user accounts ... on to the new domain, they will have the same profile settings as before, ... confusing with the SID history, it related to user accounts or computer ...
    (microsoft.public.windows.server.migration)