Hello, TP If you enable "SIDHistory", then the NT 4 SID is carried over into the users new Windows 2000 account, so that all access to resources that the "old" NT 4 account had, the new W2K account will also have.
(This will not work if you create a brand new W2K account and try to give it access to NT 4 resources - hopefully you will not have to go backwards like that. But if you do, that is where your 2-way Trust will let you add your new W2K account into the ACL list of an NT4 resource, such as a a file or folder) Cheers Bud Dawson =====+=====+=====+=====+=====+=====+===== Bud Dawson MacDonald Dettwiler Windows System Admin Computer Services Dept Tel (604)231-2132 13800 Commerce Parkway Fax (604)278-3786 Richmond, British Columbia Email: [EMAIL PROTECTED] CANADA V6V 2J3 or: [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> Web Site: < http://www.mda.ca> =====+=====+=====+=====+=====+=====+===== -----Original Message----- From: Pham, Tuan [mailto:[EMAIL PROTECTED] Sent: February 28, 2003 6:00 AM To: NT 2000 Discussions Subject: Access resources between domains Hello, I just brought up a new W2K-AD domain parallel to the existing NT4.0 domain, there is a full trust between the two. Then, I created all new accounts in AD, and slowly migrating all resources from NT to W2K domain, then destroy the old domain. My question is, during the migration user from both domains need to get back and forth to access resources, what would be the most efficient method to carry out? Can I use the Universal Group that come with W2K or is that only work in W2K domains(no NT)? Any idea? Thanks! TP ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to %%email.unsub%% ------ You are subscribed as [EMAIL PROTECTED] Archives: http://www.swynk.com/sitesearch/search.asp To unsubscribe send a blank email to [EMAIL PROTECTED]
