RE: Builtin Group Membership

Tech-Archive recommends: Speed Up your PC by fixing your registry

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 11/04/04 

Date: Thu, 04 Nov 2004 12:05:20 GMT

Hi Gurprret,

Thanks for your posting here.

When you use Security Translation Wizard in ADMT, you can choose Replace or
Add option. As for your scenario, you can use Add security translation
option, so both the older domain users and new domain users have the
perssions to the file server.

Have a nice day!

Regards,
Bob Qin
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
      From: "=?Utf-8?B?R2Fycnk=?=" <Garry@discussions.microsoft.com>
      Subject: Builtin Group Membership
      Date: Wed, 3 Nov 2004 07:07:03 -0800
      Newsgroups: microsoft.public.windows.server.migration
      
      Hi,
      I am migarting NT to Windows 2003. We are migrating the users in
batches of
      40 every day. AT the moment, I have migrated 40 users to new domain
and the
      rest are on NT domain. The issue is that the migrated users on AD are
not
      able to access some resources as the permission was granted to Domain
Users.
      Now, if I do a Security translation using a SID mapping file, will it
replace
      the permission of OldDomain/DomainUsers with NewDomain/DomainUsers or
it will
      keep both of them. Because otherwise, the users still on NT domain
will not
      be able to access these resources.
      Looking forward to your help..
      
      Regards,
      Gurpreet
      

Relevant Pages

  • Re: adding a group to local computer
    ... Please no e-mails, any questions should be posted in the NewsGroup This posting is provided "AS IS" with no warranties, and confers no rights. ... why must all your domain users be local admin? ...
    (microsoft.public.windows.server.active_directory)
  • RE: "Domain Users" group quirk
    ... Domain Users, Domain Admins. ... the security information of share or folders will not be changed. ... Migration of a Windows NT 4.0 Account Domain to Active Directory ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.migration)
  • Re: Internal domain AND external users?
    ... >> (also posting this in MVP private groups) ... > Given that your otherwise identical message in the STS newsgroup said ... >> I have clients that needs to have both internal domain users and external ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: TS Web Client unable to logon interactively
    ... > Hi David, ... > Thanks for your posting and thanks for Vera's help. ... rights. ... >>use a slightly more restricted group, like Domain Users. ...
    (microsoft.public.windows.terminal_services)