Additionally you may also want to consider either using a third party tool that can constantly sync the groups. Or maybe just stop making changes on the source and only make the changes on the target. Then there's no need to pay attention to the source from the administrative perspective. Unless you need long term coexistence in which case it's not really a migration as much as a temporary coexistence (by temporary, it could be longer than some folks have been employed at a customer - ergo, it's not temporary but rather permanent from that perspective. Philosophical I know, but I'm trying to show a different perspective and way of thinking of the problem in the hopes that you'll have other options available.).
On 6/26/06, Phil Renouf <[EMAIL PROTECTED]> wrote:
With SIDHistory all the migrated users will continue to be able to access the resources in the source domain that the Global group is permissioned for, just make sure to migrate the SIDHistory of the groups as well. I would suggest migrating all the groups first, then migrate your users in the phased migration. You can also do a nightly migration of the groups to fix the group membership if there are any major changes etc.You could also migrate all the users and groups ahead of time, then in a phased approach migrate small groups of users to make sure that the passwords are up to date.Phil
On 6/26/06, Contreras, Robert <[EMAIL PROTECTED] > wrote:Hello all,About to embark on an Interforest Migration. I'm going to migrate using ADMT /w Sidhistory. One question regarding global groups in the source forest- what is the best practice when dealing with the migration of these groups to allow users to retain access to resources during my phased migration. All of my resources are assigned rights via Global Groups and even though I'm migrating the user with Sidhistory, I need to bring over the groups as well. Should I migrate the group along with the user? How is coexistence and administration handled when dealing with both groups in separate forests? Perform a sync on the groups on nightly basis? (if there are allot of changes)Any other gotchas?Thanks!
