Frances [MSFT]
Guest
|
Posted:
Tue Jan 25, 2005 2:05 pm Post subject:
RE: No Access on Existing Shares |
|
|
Hi Richard,
Thank you for posting here!
I noticed that you had posted the same question titled "Migrating W2k3 to
new W2k3 Domain" in our newsgroup; please check my answer to your question,
and if you need any further assistance on this particular issue, please
reply to me in that thread so I can follow up with you.
In addition, I noticed that you had confirmed that it is not concerning the
SID filtering. So I suggest you perform the steps I offered and use
Security Translation Wizard to have a check.
For your convenience, I have included my reply as follows:
----------------------------------------------------
Hello Richard,
Thanks for your post.
From your message, I understand that the issue is the users in domainB
cannot access the resources in domainA although the SIDHistory is enabled
in the migration process.
I have to obtain more detailed information for your problem. Do you perform
an inter-forest migration involving two forests or an intra-forest
migration involving one forest?
If you have performed the inter-forest migration, it is possible that the
domainB users cannot access the resources in domainA due to the SID
filtering set by default. You can use netdom to configure SID filtering.
Refer to the following article to use the netdom trust command:
NetDom Syntax
http://www.microsoft.com/resources/documentation/WindowsServ/2003/all/techre
f/en-us/Default.asp?url=/Resources/Documentation/windowsserv/2003/all/techre
f/en-us/NetDom_syntax.asp
If this is not the case, please double-check the SIDHistory attribute.
Also, please follow the steps below to isolate the problem.
To clarify, let us name domainA\u1 and domainB\u1 for a migrated user u1 |
|