Weird post ADMT Problem....accesing old file shares.

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance



Hi All.

I have two 2003 domains with an external trust. That has been in place
for some time. All fine.

I have domain A (target) and domain B (source). I am starting to test
migrating groups from domain B to A.

I have used ADMT with SID History enabled to migrate groups from B to
A. This seems to have worked fine.

Some of the groups from Domain B (source) have NTFS permissions
assigned on file shares on that domain, domain B.

As my groups that i have migrated from domain B now exist in the
target Domain A, i should therfore be able to add users from Domain A
to the migrated group from Domain B - This will allow me to continue
to access a file share resource in Domain B.

To test this i log on to a computer in Domain A and try to access a
file share in Domain B. The logon account is a member of the correct
group. The result is that this wil fail, with an access denied error.
However if i create a new share (instead of using an existing share)
and permission it corectly i can access this share.

So, to summarise it seems that the SID history is only wortking when
attempting to connect to a newly created folder/share but for some
reason not on existing/older folders.

I am totally stumped with this one.

Any suggestion will be appreciated, thanks in advance!

Colin.
.