With SIDHistory all the migrated users will continue to be able to access the resources in the source domain that the Global group is permissioned for, just make sure to migrate the SIDHistory of the groups as well. I would suggest migrating all the groups first, then migrate your users in the phased migration. You can also do a nightly migration of the groups to fix the group membership if there are any major changes etc.
You could also migrate all the users and groups ahead of time, then in a phased approach migrate small groups of users to make sure that the passwords are up to date.
Phil
On 6/26/06, Contreras, Robert <[EMAIL PROTECTED]> wrote:
Hello all,About to embark on an Interforest Migration. I'm going to migrate using ADMT /w Sidhistory. One question regarding global groups in the source forest- what is the best practice when dealing with the migration of these groups to allow users to retain access to resources during my phased migration. All of my resources are assigned rights via Global Groups and even though I'm migrating the user with Sidhistory, I need to bring over the groups as well. Should I migrate the group along with the user? How is coexistence and administration handled when dealing with both groups in separate forests? Perform a sync on the groups on nightly basis? (if there are allot of changes)Any other gotchas?Thanks!
