Can I migrate users, groups, and computers from one domain to another using LDIFDE.EXE and retain SID information?

Posted on 2009-12-23
Last Modified: 2012-05-08
I have an SBS server that I'm replacing with an EBS implementation.  SBS does not permit trusts, so I cannot use the Active Directory migration tool to migrate the AD objects to the new domain.  

Can I use ldifde.exe to export these objects and then import them into the new domain while retaining SID information?  I would like to avoid re-creating users and joining/un-joining every client workstation to the new domain and deal with local profiles, etc. etc.

Question by:Pantz
    LVL 70

    Accepted Solution

    No - you will lose the SID information.
    LVL 70

    Expert Comment

    LVL 38

    Expert Comment

    by:Philip Elder

    Author Comment

    This document is only relevant if joining the EBS server to the existing SBS domain.  We are not doing that.  We created a new domain outright.
    LVL 59

    Assisted Solution

    by:Darius Ghassem
    If you create a new domain you will be losing all SID data. There is not a way to go about keeping the SID data since this data is a domain function.

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Top 6 Sources for Identifying Threat Actor TTPs

    Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

    If you migrate a Terminal Server licenses server inside the 2008 server family, you can takte advantage of the build-in migration tool. If you like to migrate an older 2003 Server (and the installed client CALs) to a 2008 R2 server for example, you …
    Redirected folders in a windows domain can be quite useful for a number of reasons, one of them being that with redirected application data, you can give users more seamless experience when logging into different workstations.  For example, if a use…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
    This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

    737 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    22 Experts available now in Live!

    Get 1:1 Help Now