save sID during migrating from Samba to ADS to sIDHistory

Hello together,

we want to migrate vom an Samba3 server to ADS and its necessary to save the old sIDs in teh sID History.

During the migration with ADMT it always appears the following error:
(translated from german)

"Its not possible to migrate the SIDs, because the auditing and 'TcpipClientSupport' in the Domain was not confirmed. The system can not find the specified file"


An bidirectional domain trust between the old and the new doamin is arranged successful.

I think thats is an problem with SAMBA, because on the smaba server I can't set an registry value.


So I have tried to use "sidhist.vbs" from the support tools. But here appears the following error:

____

Connected
Error 0x80072158 occurred.
Error Description: Failed to add the source SID to the destination object's SID
history. The error was: "You have to activate auditing in the target domain" (translated from german)
Error HelpContext: 0
Error HelpFile :
Error Source : DSUtils.ClonePrincipal.1

____

So far so good, but I have already activated the auditing in the target domain in the default domain policies. The error still appears. :-(


Have anybody an idea to solve this problem?

Thanks a lot!


*Bjoern*
.

Relevant Pages

  • Re: UserName of the use who last modified a file in Windows
    ... audititing system traces the user's SID and the object access. ... For there you *COULD* in theory to find out who was the last SID manipulating the file. ... Agreed, that's something you can do on a restricted level, say per file basis or folder (by activating the File auditing) depending on the systems activity, the problem is that the number of events can be so high, that the security log fills very quickly. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: [PATCH 2/3] CRED: Split the task security data and move part of it into struct cred
    ... What should auditing use in audit_filter_ruleswhen dealing with ... just object labels. ... I think you likely want the actor SID / subject SID or whatever you want ...
    (Linux-Kernel)