Re: What permissions are needed to migrate SID?
From: Frances [MSFT] (v-franhe_at_microsoft.com)
Date: 02/15/05
- Next message: Timo Kohlbacher: "Missing settings in ADTM v2"
- Previous message: Frances [MSFT]: "Re: Importing passwords"
- In reply to: Magnus Nilsson: "Re: What permissions are needed to migrate SID?"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 15 Feb 2005 05:30:56 GMT
Hello Magnus,
Yes, your understanding is right.
The user running ADMT must have Domain Admin rights in the source domain,
and delegated rights in the target domain to complete certain tasks.
Meanwhile, he must have administrator rights on the machine running ADMT.
It is a best practice to run ADMT in a DC of the target domain and make the
user the built-in Admin in the DC.
As for your suggestion, yes, it is really good to delegate permissions for
such tasks as SID and password migration. I have forwarded your feedback to
the appropriate folks to catch their immediate attention. Maybe we can add
some features in the future versions of ADMT. Thanks for your suggestion.
Below is the content I have emailed to MSWISH@microsoft.com
<mailto:MSWISH@microsoft.com>
===========*******************==============
MSWISH,
One of my customer suggests that it would be best to delegate permissions
for such tasks as SID and password migration in the future versions of
ADMT. Because in some migration scenario concerning large organizations, it
is very restrictive to assign Domain Admins permissions. However, the
current ADMTv2 requires Domain Admin rights in the source domain.
Please take consideration of his suggestion. Thanks!
===========*******************==============
If you have any further questions, don't hesitate to get in touch!
Best regards,
Frances He
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
- Next message: Timo Kohlbacher: "Missing settings in ADTM v2"
- Previous message: Frances [MSFT]: "Re: Importing passwords"
- In reply to: Magnus Nilsson: "Re: What permissions are needed to migrate SID?"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
