Re: ADMT and SID's

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

The ldp tool from the resource kit will show the sids (and history) of any object.

Allan Jacobs
"WadeBart" <WadeBart@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message news:06C4B1CA-FE53-4AF4-98EE-6FC53082C731@xxxxxxxxxxxxxxxx
How can I verify the SID history is coming across then?

"Herb Martin" wrote:


"WadeBart" <WadeBart@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:E03E13C7-7623-4473-958E-9477487C3461@xxxxxxxxxxxxxxxx
> Why would SID's be different for an account that was migrated with the
> ADMT.
> I compared a source account SID to the migrated account SID and their
> different.

Because the SID is created for the new account on the new domain.

> I have a trust establed, without SID filtering and I tell the
> ADMT tool to migrate the SID history.

Then the SID HISTORY should be there in addition but the new account
will have a NEW SID in the destination domain.

> This seems to be only a problem with a
> child domain of the source domain, and not with users in the actual > source
> domain. I have an external trust setup to the source domain and > another
> external trust to the child domain of the source.




.

Relevant Pages

  • Re: EFS Decryption Problem
    ... Was it only used to match up to the backed up userprofile, ... I thought the account's SID and password was involved in generating the ... a new account is created). ... instance of Windows would have a different SID even after restoring the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Update still failing with 80240020 and 8024000c
    ... There is still indication that the SID ... reporting because I think that ultimately it is going to be their accounts ... with the System account yesterday. ... In your case the System account would be ...
    (microsoft.public.windowsupdate)
  • RE: Error 15401 using sp_grantlogin (not addressed by current KB articles)
    ... argument to get_sid, it returns a sid. ... The sysxlogins.name column stores the NT account ... One way to get SQL Server to agree with the renamed NT ... check "Script all objects", on the Formatting tab UNcheck "Generate the ...
    (microsoft.public.sqlserver.security)
  • Re: is there a simple to get "userid" in a windows domain?
    ... suspect a minor change to the way I access ntSecurityDescriptor would give ... Is it possible to get a User SID from ... >> than the account names when referring to the account. ... >> Eric Fitzgerald ...
    (microsoft.public.security)
  • Re: Cannot obtain account SID using C#/WMI
    ... >>> user mapping is for the default SYSTEM account. ... >>> Is this SID available through WMI? ... This includes loading the user profile, ... you need to make sure that hives are unloaded when done with them! ...
    (microsoft.public.dotnet.languages.csharp)