Correct - and I support what is being said by MS - that it will only migrate
to the exact SID on the receiving end.
However, maybe someone else can shed some light - I'm not sure what the
setting is to allow it in ADMT at the moment.
Rick Kingslan MCSE, MCSA, MCT
Microsoft MVP - Active Directory
EMAIL PROTECTED]
Subject: RE: [ActiveDir] sidhistory of well known groups
Graham,
You cannot migrate the well known groups from one domain (or forest) to
another. The SIDS are universally the same. ADMT will attempt, however the
well-known already exists, and you cannot migrate it.
Our solution was to
Rick, thanks for the reply post.
membership of these groups not the issue - i take your point though
it is more to do with the ability to translate the security of the
resources which as i understand wont happen without an entry in the ADMT
database -
but thinking about it I don't need to do
Graham,
You cannot migrate the well known groups from one domain (or forest) to
another. The SIDS are universally the same. ADMT will attempt, however the
well-known already exists, and you cannot migrate it.
Our solution was to take an inventory of who / what was member of the groups
(or inclu
Dear all, have posted quite recently with no feedback so hoping this time
round to get a bit more info,
still looking at strategy for migration of the well known accounts -
"Domain Admins" / Domain Users on which a lot of domain security is based.
thought this was where the Group mapping and me
