Pass through authentication through 2 domains??

  • Thread starter Thread starter MEI
  • Start date Start date
M

MEI

We just set-up a new domain based on a 2003 DC and established a trust with
our older domain on a 2000 server. We have roughly 200 gigs of file storage
on the older 2000 server which needs to be accessed by users who have been
migrated to the 2003 domain.. I have set-up their user accounts and
passwords so they are identical on each domain but when they click on the
shares they used to be able to access they are not able to access.. We
migrated the legacy SID information with each user profile. Is this
possible?? I don't want to assign new security rights to all these folders!
Thanks,
MEI
 
We just set-up a new domain based on a 2003 DC and established
a trust with
our older domain on a 2000 server. We have roughly 200 gigs of
file storage
on the older 2000 server which needs to be accessed by users
who have been
migrated to the 2003 domain.. I have set-up their user
accounts and
passwords so they are identical on each domain but when they
click on the
shares they used to be able to access they are not able to
access.. We
migrated the legacy SID information with each user profile. Is
this
possible?? I don't want to assign new security rights to all
these folders!
Thanks,
MEI
Click to expand...

What do you mean with "We migrated the legacy SID information with
each user profile"?

If you mean you migrated the old user accounts to the new domain with
sidhistory than that is OK. I assume your data is protected by groups
that are in the old domain. If that is true and you did not migrate
the groups with their memberships than users will not have access.
After that and after migrating the server or data to the new domain it
is best to re-acl the data with the sids of the groups that have been
migrated to the new domain and after that cleaning up sidhistory for
user accounts and groups.

To migrate groups, users, etc -> ADMT
To re-ACL data ->ADMT
To cleanup sidhistory -> clone principal scripts... (need to be
customized)
 
Back
Top