Solved

ADMT 3.1 is not allowing migrated users from target AD 2008 forest to access resources in windows 2003 source forest

Posted on 2009-04-06
2
327 Views
Last Modified: 2013-12-24
Objectives: Customer has one AD 2003 forest and would like to migrate to new Windows 2008 AD forest. All resources from the source AD 2003 forest will be migrated using the ADMT 3.1 tool with SID history to the target windows 2008 forest.
After setting up the trust relationship between the two forests, customer was able to migrate users and computer accounts with no problem.
The major issue customer encountered is that after the user account get migrated to the windows 2008 forest user cannot access old resources in the old windows 2003 source forest. In order for the migrated user to access old resources the ACLS must be manually configured on the user account in the target forest.  
We do not know why ADMT is not re-applying the ACLS on the migrated user. Any idea?  
0
Comment
Question by:mjawarish
2 Comments
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
ID: 24086765

If you haven't disabled SID Filtering on the Trust then the SID History won't be able to help you access resources on the old domain.

See:

http://technet.microsoft.com/en-us/library/cc772816.aspx

HTH

Chris
0
 

Author Comment

by:mjawarish
ID: 24099854
Actually I was able to resolve the issue by following the steps in this link
http://technet.microsoft.com/en-us/library/cc755427.aspx
which is the same as what Chris-Dent suggested

Thanks Chris
0

Featured Post

Windows Server 2016: All you need to know

Learn about Hyper-V features that increase functionality and usability of Microsoft Windows Server 2016. Also, throughout this eBook, you’ll find some basic PowerShell examples that will help you leverage the scripts in your environments!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

For most people, the WrapPanel seems like a magic when they switch from WinForms to WPF. Most of us will think that the code that is used to write a control like that would be difficult. However, most of the work is done by the WPF engine, and the W…
The password reset disk is often mentioned as the best solution to deal with the lost Windows password problem. In Windows 2008, 7, Vista and XP, a password reset disk can be easily created. But besides Windows 7/Vista/XP, Windows Server 2008 and ot…
This is Part 3 in a 3-part series on Experts Exchange to discuss error handling in VBA code written for Excel. Part 1 of this series discussed basic error handling code using VBA. http://www.experts-exchange.com/videos/1478/Excel-Error-Handlin…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

785 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question