RE: Migrating W2k3 to new W2k3 Domain

From: Frances [MSFT] (v-franhe_at_microsoft.com)
Date: 01/25/05 

Date: Tue, 25 Jan 2005 06:49:52 GMT

Hello Richard,

Thanks for your post.

>From your message, I understand that the issue is the users in domainB
cannot access the resources in domainA although the SIDHistory is enabled
in the migration process.

I have to obtain more detailed information for your problem. Do you perform
an inter-forest migration involving two forests or an intra-forest
migration involving one forest?

If you have performed the inter-forest migration, it is possible that the
domainB users cannot access the resources in domainA due to the SID
filtering set by default. You can use netdom to configure SID filtering.

Refer to the following article to use the netdom trust command:

NetDom Syntax
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techre
f/en-us/Default.asp?url=/Resources/Documentation/windowsserv/2003/all/techre
f/en-us/NetDom_syntax.asp

If this is not the case, please double-check the SIDHistory attribute.
Also, please follow the steps below to isolate the problem.

To clarify, let us name domainA\u1 and domainB\u1 for a migrated user u1

Relevant Pages

  • Re: ADMT and SIDHistory
    ... users and groups) to retain access to resources in the old domain. ... Consider the concept of SIDHistory as analogous to travelling with two ... The new passport allows you visit to a new set of countries, ... Once the migration is complete and you have re-permissioned all the ...
    (microsoft.public.windows.server.active_directory)
  • RE: ADMT Migration and NTFS
    ... is advice on how to determine the best way to add the builtin group from the ... We are currently in the phase of migration where we need to make sure the ... > Do you migrate the user with SIDHistory? ... Thus he can access the resources in NT domain. ...
    (microsoft.public.windows.server.migration)
  • Re: W2k3 AD migration to W2k3 AD - HELP HELP!!
    ... Setup trusts (if an external trust is configured and sidhistory is used, ... Install and configure migration tooling ... Translate security of the data/resources from source security ... while those resources still have security descriptors from the old domain. ...
    (microsoft.public.windows.server.migration)
  • Re: Inter-Forrest Migration Steps Phase 1 : DNS, WINS & DHCP Migration
    ... Inter-Forest Migration of my own. ... operating on domainA into their own domain which we will call domainB. ... > finding exact steps to follow for DNS & DHCP migration. ...
    (microsoft.public.windows.server.migration)
  • Re: Over-the-Wire Migration Plan
    ... It will help in your migration. ... Are you migrating from DomainA, TLD-netbios name DomainA to DomainA.com - ... You'll need to add the account running admt to the local administrators ... Install and configure domainA.com DC1 with AD, ...
    (microsoft.public.windows.server.active_directory)
Loading