All, I'm using the cloneprincipal tools to migrate users/groups from NT4 domains to our AD.
Most of our sites stick to best practices and have used local groups to assign permission, and global groups to contain users and put the global groups in the local groups. We do have some sites where they have been less carefull and they have been liberately creating permissions using Domain Users and/or Domain Admins. I would expect you'd be able to migrate the user list and sid use clonepr.vbs, but although the user list is updated, the SID doesn't come over: "The server is unwilling to process the request. " Has anyone been able to find a way around this? Any suggestion on how we should deal with these scenarios? Your help/ideas would be much apprpeciated. Rgds, -- Frank P. Ooms <[EMAIL PROTECTED]> Principal IT Systems Architect Schlumberger IT Standards & Planning Tel: +31 70 3105454 Fax: +31 70 05 463 Mobile: +31 6 51280369 List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
