Using Microsoft's ClonePrincipal, how could I test if an environment's configuration is properly set (NETIQKB1284)

  • 7701284
  • 02-Feb-2007
  • 08-Sep-2008



The following information will allow you to test your environment's configuration readiness for SID History migrations using a non-NetIQ tool. Using Microsoft's ClonePrincipal native tool, a simple diagnostic script will run with a success or failure result indicating the environment's status. Further information about the ClonePrincipal can be found in the ClonePrincipal User Guide, Clonepr.doc, which is installed with the Microsoft Support Tools.

Please follow these instructions:

  1. First, install Microsoft Support Tools from the Windows 2000 Server CD.
  2. Open up the Command prompt and change the directory to "%root%:\Program Files\Support Tools".
  3. Refer to the Domain Migration Administrator User Guide and make sure all requirements for SID History have been met. (DMA will attempt to automatically set all of the requirements when migrating your first account with the SID History option selected.)
  4. Enter the following syntax for SID History to be migrated with a test account:
  5. cscript sidhist.vbs /srcdc:SOURCE DC /srcdom:SOURCE DOMAIN /srcsam:SOURCE USER NAME /dstdc:TARGET DC /dstdom:TARGET DOMAIN /dstsam:TARGET USER NAME

      If SID History is migrated successfully you should see the following or similar
      %root%:\Program Files\Support Tools; cscript sidhist.vbs /srcdc:SOURCE DC /srcdom:SOURCE DOMAIN /srcsam:SOURCE USER NAME /dstdc:TARGET DC /dstdom:TARGET DOMAIN /dstsam:TARGET USER NAME Microsoft (R) Windows Script Host Version 5.1 for Windows Copyright (C) Microsoft Corporation 1996-1999. All rights reserved.


      If you see any other type of error, then the Microsoft Native tool has found that your environment is not setup correctly in accordance to the ClonePrincipal requirements, which are the same requirements for Domain Migration Administrator. A list of requirements can be found in article NETIQKB2017 'What are the requirements to install Domain Migration Administrator (DMA) and Server Consolidator?' or the Domain Migration Administrator User Guide.

      Please contact Technical Support to create a Support Request for any issues you encounter that are not addressed by the User Guide, any Knowledge Base articles found on the website, or current Hotfixes available for download.

    Additional Information

    Formerly known as NETIQKB1284