Re: Domain Restructure

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Marin Marinov (mlmarinov_at_askme.ca)
Date: 04/18/04


Date: Sun, 18 Apr 2004 10:43:36 -0400

In article <18f0e01c423b3$624195c0$a001280a@phx.gbl>,
anonymous@discussions.microsoft.com says...
> Thanks for the reply, Marin.
>
> Just to be clear...After user accounts are migrated and
> IIS member server is moved to new Win2003 domain, will I
> NOT need to reset permissions on folders/files on the IIS
> member server?
>
> Scott
<snip>
Sorry for the delay, Scott. It depends - if you migrate the users with
their old SIDs, i.e. utilize SID History, then you won't have to reset
perms. If you don't, you have the option of using the Security
Translation wizard in ADMT that will go over the existing perms and
replace the old SID with the new SID - again no loss of access. Check
out the topic on Security Translation Wizard in ADMT help for more
information, it slightly changes your approach to migrating your server.

HTH

-- 
Cheers,
   Marin Marinov
   MCT,MCSE 2003,MCSE:Security 2003
-
This posting is provided "AS IS" with no warranties, and confers no 
rights.


Relevant Pages

  • RE: Forest Trust Problem - SID Conflict (Yet another crisis)
    ... We have a one way trust between PP and Corp (PP ... Prod\Admins group is a member of the Local Administrators ... group of a member server. ... > SID to be duplicated when generating the new domain via dcpromo. ...
    (microsoft.public.windows.server.active_directory)
  • Re: howto: migrate fileserver resources from NT4 BDC to W2003 member server
    ... Please understand ACL use SID to indentify each user account. ...
    (microsoft.public.windows.server.migration)
  • problem migrating security settings via ADMT
    ... After migrating a single computer that's a member server of the source ... domain and shutting the source domain controller down, ... Does anybody know if this is the way ADMT works or is it a bug? ...
    (microsoft.public.win2000.active_directory)
  • Re: Domain Restructure
    ... Just to be clear...After user accounts are migrated and ... IIS member server is moved to new Win2003 domain, ... >migration so you have a backup path in case things go ...
    (microsoft.public.windows.server.migration)
  • Quesstions about Server 2008
    ... We are in the process of evaluating our strategy for next year. ... I want to set a strategy that starts migrating off of the software. ... Can I add a W2008 member server to the domain w/o upgrading the domain? ... Windows Server - Directory Services ...
    (microsoft.public.windows.server.general)