Windows Forum

Ask something
Discussion Locked

AD Migration

0 helpful
7 replies

by expertpc

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Two Domains. Source is NT4. Target is WIN2k AD in Native mode. Two way trust established. ADMT used to migrate a number of users. SID history created and sourvce user accounts diabled.

Problem:

Users cannot access their resources on the old domain. I have created a group with these users and added that group to temporarily allow access.

Why can't these users access their old resources in the source domain? They do have their SID Histories. The source accounts were disabled (even thoughthat looks obviuos, it has been in use for 1200 other users for 6 months now).

Any ideas?

7 replies

by cg it

well even though you've established a "trust" in AD on the W2K server, because it's running in native mode, the W2K server can't "talk" to the NT server. [I'm assuming the NT4 is a controller] ["Native mode" requires all domain controllers on the LAN to be running W2K server. Mixed mode allows Pe-Windows 2000 domain controllers to operate with W2K controllers on the same LAN].

by cg it

note: I assume that the NT4 server is WITHIN the W2K server domain, and is a controller. Creating a universal security group won't override this native mode restriction on controllers operating within on domain.

If the NT4 server is a domain controller OUTSIDE of the W2K server domain, then the universal security group should work. Please elaborate on the network topology.

by cg it

DUH!!!! didn't fully read the question!!! Two DOMAINS! Just reject my answer [geez day before Thanksgiving and I go brain dead.

by legj1

The guy ahead of me is exactly right. Native Mode means that you are running a native Win2000 network with no NT PDC or BDC's on board.

This discussion is closed to new replies.