Re: SID History Issues.... 2003 AD & NT4.0
From: Mike Goldsworthy (mgoldsworthy_at_hotmail.com)
Date: 02/24/04
- Next message: Woody Guo [MSFT]: "Re: Upgrading a NT 4.0 Domain Controller to 2003"
- Previous message: Adrian Donlan: "RE: Adprep /domainprep failure"
- In reply to: Steven Liu: "Re: SID History Issues.... 2003 AD & NT4.0"
- Next in thread: Steven Liu: "Re: SID History Issues.... 2003 AD & NT4.0"
- Reply: Steven Liu: "Re: SID History Issues.... 2003 AD & NT4.0"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 24 Feb 2004 11:26:03 +0000
Steve,
That would certainly explain it, thanks very much for spending the
time on this.
It does lead me to another very quick question though :-) As you can't
migrate built-in groups and we have a lot of areas locked down with
ACL access given to halcrow_group\domain admins....
Whats the best way of getting around this? I would guess maybe
amending either the ACL on all the shares to give access to a non
built-in group or to add domain admins to the local servers
adminstrators group... If thier is an easy way I'm al ears...
Thanks again
Mike
On Mon, 23 Feb 2004 03:30:35 GMT, stevenl@online.microsoft.com
("Steven Liu") wrote:
>Hi Mike,
>
>>From the migration log, I found the user name is GoldsworthyM. The user
>migration sucesses and the SID history has already been migrated.
>
>The source domain is HALCROW_GROUP. The target domain name is AD.
>
>>From the screen capture, the GoldsworthyM does not have the Full Control
>permission to the folder directly. The GoldsworthyM is a member of a group.
>The group has the full control permission to the folder. The permission of
>HALCROW_GROUP\GoldsworthyM is inherited from the group.
>
>In this scenario, the AD\GoldsworthyM won't have the permission to access
>the folder. You should generate the permission to the
>HALCROW_GROUP\GoldsworthyM Full Control permission to the folder directly.
>Then, the AD\GoldsworthyM can access the folder. Or, you also can migrate
>the group to the AD domain with the SIDHistory. This also can solve the
>problem.
>
>In the ADMT, we also can migrate the group account.
>
>Thanks for using Microsoft Newsgroup!
>
>Sincerely,
>
>Steven Liu [MSFT]
>
>Microsoft Online Partner Support
>
>MCSE 2000
>
>Get Secure! - www.microsoft.com/security
>
>This posting is provided "as is" with no warranties and confers no rights.
- Next message: Woody Guo [MSFT]: "Re: Upgrading a NT 4.0 Domain Controller to 2003"
- Previous message: Adrian Donlan: "RE: Adprep /domainprep failure"
- In reply to: Steven Liu: "Re: SID History Issues.... 2003 AD & NT4.0"
- Next in thread: Steven Liu: "Re: SID History Issues.... 2003 AD & NT4.0"
- Reply: Steven Liu: "Re: SID History Issues.... 2003 AD & NT4.0"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
