Assuming that all domains are Windows 2000
native mode I would have thought that a account move using the SID history
property should be able to handle this. Have a look at either the Quest or
Net-IQ tools. The same should hold for the Exchange situation.
Regards
Peter Johnson
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brent Westmoreland
Sent: 05 November 2004 22:06
To: [EMAIL PROTECTED]
Subject: [ActiveDir] Ladies and
Gentleman, A complex AD/Exchange issue.
Background information:
There is a global Windows 2000 active directory forest with three primary
domains Europe, Americas, & Asia Pacific as well as an empty forest root.
There is a single global exchange 2003 organization with three administrative
groups, I’ll let you guess how they are arranged.
The European market is in the process of migrating from HP Openmail to
Exchange.
The Americas market has always been using exchange.
There is an expatriate program where business persons can travel abroad and
hold positions for a period of years in which they will eventually return home.
A great deal of these expatriates are high ranking company officials who
have been with the company for a number of years and therefore have their sid
associated with ACLs all over the place.
When an expatriate travels from Europe to the Americas, their account has
historically been maintained in both domains until their return to Europe. This has introduced a number of issues with the exchange migration leading
the Europeans to issue a mandate that all 1500 of these expatriates choose the
account that they want to keep within the next two weeks. This solution
does not provide adequate customer service according to management.
My question is two fold:
- does anyone know of an easy way to consolidate
accounts and mailboxes into a single account and mailbox with an automated
process that will preserve the permissions to files, directories, etc. and
still allow for the user’s
Openmail to be migrated into that
single remaining mailbox?
once the migration is completed,
how is the move from one domain to another maintained as users begin new
assignments and complete old ones so that their account is easily moved to the
alternate domain with no loss of permissions?
If anyone has any good solutions I would be happy to hear them, a quick
solution is needed to allow for the migration to continue.
