Re: Write to the registry

Hi,

Yeah I saw that this morning and was a little disheartened - but thats ok.
There has to be another way to get this taken care of.

This may sound loike a dumb question, but would it work just as well to
place the servers in the domain as member servers, and then move the users
into AD using ADMT, do a sid mapping and then removing the local user
altogether?

The whole point is to move all users from a local work group account to a
domain account on a dc and eliminate the work group as well as all users in
the work group - but to maintain all of the previous ACLs and security
context / access permissions.

If I am way off I would appreciate you pointing me in the right direction.
:)

"Torgeir Bakken (MVP)" <Torgeir.Bakken-spam@xxxxxxxxx> wrote in message
news:OD1W$eOmFHA.708@xxxxxxxxxxxxxxxxxxxxxxx
> Hi again Sara,
>
> I just read and responded to your post "Move users and keep sids"
> in the microsoft.public.scripting.wsh newsgroup.
>
>
> Here is what I posted in that thread:
>
> Sorry, what you want to do is not possible, there is no way you can
> migrate a local user account to a new domain user account and keep
> the same user SID.
>
> Regards,
> Torgeir
>
>
> Sara wrote:
>
> > Hi Guys!
> >
> > I have a script that grabs a users sid and stores it in a file, as well
as
> > few other details.
> >
> > I am now trying to take this file and use it to import the info, and
> > everything works except for the import of the Sid Binary key.
> >
> > I was trying to use the "SetBinaryValue Method of the StdRegProv Class"
as
> > microsoft has on MSDN here:
> >
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/setbinaryvalue_method_in_class_stdregprov.asp
> >
> > However it doesnt work for me, using this assumes that I have a binary
> > representation, and alas that is the part that I am stuck on.
> >
> > Any advice?
> >
> >
>
>
> --
> torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway
> Administration scripting examples and an ONLINE version of
> the 1328 page Scripting Guide:
> http://www.microsoft.com/technet/scriptcenter/default.mspx


.

Relevant Pages

  • Re: How to determine the SID of a Global Group
    ... Unfortunately I need the SID of a Global ... Group in and NT4 domain and not AD, so adfind is not going to help on this ... of scripting, to enumerate all the group SID's within a domain. ...
    (microsoft.public.windows.server.general)
  • Re: NTFS File Encryption Question
    ... I am certainly no expert on EFS and the XP implementation, ... know it is tied to the SID of the user account in question. ... >>>What do I need to do to be able to access these files on my laptop? ...
    (microsoft.public.windowsxp.general)
  • Re: Determine if IdentityReference is a Security Group
    ... You need to tell whether a sid is a user account or group, ... Get the Win32Security.dll You can then easily determine the type of sid but, ... bins to enforce Windows Security business logic (order of Allow/Deny ... Allow and Deny are easily obtained from IdentityReference. ...
    (microsoft.public.dotnet.security)
  • RE: sid
    ... resolve a fully qualified SID to a user account against a local or remote ... Sid2name.exe was recently built to resolve SID ... An optional command argument can specify on which Windows NT ... - When this line is typed at the command prompt ...
    (microsoft.public.win2000.security)
  • Re: howto: migrate fileserver resources from NT4 BDC to W2003 member server
    ... Please understand ACL use SID to indentify each user account. ...
    (microsoft.public.windows.server.migration)
Loading