Frank,
Have you checked this KB Article? Error Messages When Using the ClonePrincipal Tool to Migrate User Accounts http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q283833& And do any of the presented scenarios match whats configured in your environment? Richard > -----Original Message----- > From: Frank Ooms [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 10, 2002 9:52 AM > To: [EMAIL PROTECTED] > Subject: [ActiveDir] SidHistory for former Domain Users, > Domain Admins, etc. > > > All, > > I'm using the cloneprincipal tools to migrate users/groups > from NT4 domains to our AD. > > Most of our sites stick to best practices and have used local > groups to assign permission, and global groups to contain > users and put the global groups in the local groups. > > We do have some sites where they have been less carefull and > they have been liberately creating permissions using Domain > Users and/or Domain Admins. > > I would expect you'd be able to migrate the user list and sid > use clonepr.vbs, but although the user list is updated, the > SID doesn't come > over: "The server is unwilling to process the request. " > > Has anyone been able to find a way around this? Any > suggestion on how we should deal with these scenarios? > > Your help/ideas would be much apprpeciated. > > Rgds, > -- > Frank P. Ooms <[EMAIL PROTECTED]> > Principal IT Systems Architect > Schlumberger IT Standards & Planning > Tel: +31 70 3105454 Fax: +31 70 05 463 > Mobile: +31 6 51280369 > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/