RE: GPMC Migration table populate with wrong source name

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Rebecca Chen [MSFT] (v-rebc_at_online.microsoft.com)
Date: 01/12/05


Date: Wed, 12 Jan 2005 13:49:51 GMT

Hi Eric,

Yes, That is becuase you have keep the SIdHistory. One group have two SIDs,
when you check the ACL, SID will be announced to in the network to find the
corresponding display name. This explains why the same group shows twice.

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: ADMT TcpipClientSupport registry key NT 4.0 to AD
    ... I would take a network trace of the failure and see where it fails. ... > but I keep getting this error message "Either the source> domain's primary domain controller (PDC) has not been re-> started after setting the tcpipClientSupport registry key> to 1 or the PDC could not be contacted." ... > I have discarded the communication problem between the NT> 4.0 server and the Windows 2003 server because when I do> not select "Migrate user SIDs to target domain" the> migration is successful. ...
    (microsoft.public.win2000.active_directory)
  • RE: GetEffectiveRightsFromAcl on WinXP x64
    ... the SIDs belong, ... To be specific -- If I create a reg key with an ACL that has 3 aces: ... Administrators -- Full Access ...
    (microsoft.public.platformsdk.security)
  • Re: SetEntriesInAcl failures?
    ... > the service reports SetEntriesInAcl fails with error code 1332 ... The SIDs are. ... A securable object is protected by its ACL, ... The only real complication is related to inheritance of ACLs, ...
    (microsoft.public.win32.programmer.kernel)
  • RE: NT-2003 Migration SID History
    ... SIDHistory will work even when the old domain is decomissioned. ... SIDs from the ACLs and the ... Joining the server to new 2003 domain does not touch the ACLs on the server ... This posting is provided "AS IS" with no warranties, ...
    (microsoft.public.windows.server.migration)
  • Re: Domain user accounts are jumbled like S-1-5-21-1844237516-19
    ... It sees the network just fine and prompts for my admin password to allow to ... add a domain user then it works but then I hit the "APPLY" butten then it ... That can also happen [the sids being ...
    (microsoft.public.win2000.networking)