Solved

How to verify SID history?

Posted on 2012-03-12
2
946 Views
Last Modified: 2012-06-27
Hi,


I have a user who is migrated to different domain with his SID history. The same user can't acces to old server which is still on old domain but another user can.
How can I verify a user SID history and make sure he still has the old SID link to his AD account?

For Exemple: Windows 2003 and AD 2003

UserX.domain1.com
UserY.domain1.com

Server1.doamin1.com


Both users are migrated to domain2.com so: UserX.domain2.com et UserY.domain2.com

UserY.domain2.com can still access to Server1.doamin1.com but not UserX.domain2.com


How can't I verify the SID history of old account is still linked to UserX.domain2.com?
0
Comment
Question by:SAM2009
2 Comments
 
LVL 6

Accepted Solution

by:
dave_it earned 500 total points
Comment Utility
Using a program like LDP or ADSIEdit, look at the sIDHistory attribute on the user for any SIDs.  From there, if you know the format of the SID for the old directory, you should be able to quickly determine if a SID from that old domain is attached to the user account in question.
0
 
LVL 1

Author Closing Comment

by:SAM2009
Comment Utility
Thank you!
0

Featured Post

IT, Stop Being Called Into Every Meeting

Highfive is so simple that setting up every meeting room takes just minutes and every employee will be able to start or join a call from any room with ease. Never be called into a meeting just to get it started again. This is how video conferencing should work!

Join & Write a Comment

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
In this article I will describe the Backup & Restore method as one possible migration process and I will add the extra tasks needed for an upgrade when and where is applied so it will cover all.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now