Richard, not quite. We're consolidating many NT4 source domains into a few W2k domains, where each OU more or less represents an NT4 domain. Mapping a Domain users of a source domain to a Domain Users in one of the domains in the forest is usually not acceptable for sites, as it increases the number of people of a few dozens to thousands that will have access to the resource.
We would like to Map \\Nt4\Domain Users to something like cn=City Users,ou=City,dc=domain,dc=com rgds, > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]] On Behalf Of > Puckett, Richard > Sent: Friday, October 11, 2002 3:31 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [ActiveDir] SidHistory for former Domain Users, > Domain Admins , etc. > > > > Frank, > > Have you checked this KB Article? > > Error Messages When Using the ClonePrincipal Tool to Migrate > User Accounts > http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q283833&; > > And do any of the presented scenarios match whats configured > in your environment? > > Richard > > > > > -----Original Message----- > > From: Frank Ooms [mailto:[EMAIL PROTECTED]] > > Sent: Thursday, October 10, 2002 9:52 AM > > To: [EMAIL PROTECTED] > > Subject: [ActiveDir] SidHistory for former Domain Users, > > Domain Admins, etc. > > > > > > All, > > > > I'm using the cloneprincipal tools to migrate users/groups > > from NT4 domains to our AD. > > > > Most of our sites stick to best practices and have used local > > groups to assign permission, and global groups to contain > > users and put the global groups in the local groups. > > > > We do have some sites where they have been less carefull and > > they have been liberately creating permissions using Domain > > Users and/or Domain Admins. > > > > I would expect you'd be able to migrate the user list and sid > > use clonepr.vbs, but although the user list is updated, the > > SID doesn't come > > over: "The server is unwilling to process the request. " > > > > Has anyone been able to find a way around this? Any > > suggestion on how we should deal with these scenarios? > > > > Your help/ideas would be much apprpeciated. > > > > Rgds, > > -- > > Frank P. Ooms <[EMAIL PROTECTED]> > > Principal IT Systems Architect > > Schlumberger IT Standards & Planning > > Tel: +31 70 3105454 Fax: +31 70 05 463 > > Mobile: +31 6 51280369 > > > > > > List info : http://www.activedir.org/mail_list.htm > > List FAQ : http://www.activedir.org/list_faq.htm > > List archive: > > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > > > List info : http://www.activedir.org/mail_list.htm > List FAQ : http://www.activedir.org/list_faq.htm > List archive: > http://www.mail-archive.com/activedir%> 40mail.activedir.org/ > List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
