Solved

ADMT 3.1 is not allowing migrated users from target AD 2008 forest to access resources in windows 2003 source forest

Posted on 2009-04-06
2
323 Views
Last Modified: 2013-12-24
Objectives: Customer has one AD 2003 forest and would like to migrate to new Windows 2008 AD forest. All resources from the source AD 2003 forest will be migrated using the ADMT 3.1 tool with SID history to the target windows 2008 forest.
After setting up the trust relationship between the two forests, customer was able to migrate users and computer accounts with no problem.
The major issue customer encountered is that after the user account get migrated to the windows 2008 forest user cannot access old resources in the old windows 2003 source forest. In order for the migrated user to access old resources the ACLS must be manually configured on the user account in the target forest.  
We do not know why ADMT is not re-applying the ACLS on the migrated user. Any idea?  
0
Comment
Question by:mjawarish
2 Comments
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 24086765

If you haven't disabled SID Filtering on the Trust then the SID History won't be able to help you access resources on the old domain.

See:

http://technet.microsoft.com/en-us/library/cc772816.aspx

HTH

Chris
0
 

Author Comment

by:mjawarish
ID: 24099854
Actually I was able to resolve the issue by following the steps in this link
http://technet.microsoft.com/en-us/library/cc755427.aspx
which is the same as what Chris-Dent suggested

Thanks Chris
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Ever notice how you can't use a new drive in Windows without having Windows assigning a Disk Signature?  Ever have a signature collision problem (especially with Virtual Machines?)  This article is intended to help you understand what's going on and…
When you upgrade from Windows 8 to 8.1 or to Windows 10 or if you are like me you are on the Insider Program you may find yourself with many 450MB recovery partitions.  With a traditional disk that may not be a problem but with relatively smaller SS…
The purpose of this video is to demonstrate how to exclude a particular blog category from the main blog page. This is can be used when a category already has its own tab, or you simply want certain types of posts not to show up on the main blog. …
The purpose of this video is to demonstrate how to add AdSense Ads to a WordPress Website, and how to set up WordPress to automatically place Ads in Sidebars. This will be demonstrated using a Windows 8 PC. Log into your AdSense account. : Cli…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now