Solved

Windows 2000 to 2003 Migration, SID History was used but migrated accounts are gettting Access Denied to resources.

Posted on 2006-06-19
3
861 Views
Last Modified: 2012-06-22
Windows 2000 to 2003 Migration, SID History was used but migrated accounts are gettting Access Denied to resources.
I verified that the SID Hitory attribute on the new domain account as the correct SID from the old.
I simply tried to access some sharred folders and get Access Denied.
As a test I manulyy added the users new 2003 account to the permissions on the shared resoures in the old domain and that works, which shows that the SID History is not being checked?

Help

Thanks
Ian
0
Comment
Question by:strathit
  • 2
3 Comments
 
LVL 71

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 16937520

Hi Ian,

Did you disable SID Filtering on the Trust relationship between the old and new domain? If not the permissions will not work between the domains.

If you do need to disable it follow this little MS piece:

http://technet2.microsoft.com/WindowsServer/en/Library/01e5cf71-b317-4967-82a2-75b7b632b7461033.mspx?mfr=true

Chris
0
 

Author Comment

by:strathit
ID: 16943545
THANK-YOU....!!!!  I wish we could assign more points!
0
 
LVL 71

Expert Comment

by:Chris Dent
ID: 16943575

Pleasure, glad it helped :)

Chris
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Restoring deleted objects in Active Directory has been a standard feature in Active Directory for many years, yet some admins may not know what is available.
While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

726 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question