E20741: SID History cannot be updated for LocalGroupA because the SID for LocalGroupA already exists (NETIQKB3940)

  • 7703940
  • 02-Feb-2007
  • 17-Apr-2008

Resolution

fact
Domain Migration Administrator 6.x

fact
Domain Migration Administrator 7.x

symptom
E20741: SID History cannot be updated for LocalGroupA because the SID for LocalGroupA already exists in the forest. rc=8539.

symptom

You will see this error in the migration.log after a group migration when you use 'Map and Merge' for groups and add SID History for the source group when this SID History has already been applied to a group in the target Active Directory.



Example:

Migrate Group A and Group B and their SID Histories from the source to the target. Everything works fine. Then merge A and B together and form Group C in the target. The members merge, but the migration.logs contain the errors and SID History is NOT updated.



cause
A source SID can only be added to one Active Directory object's SID History attribute in a single Forest.

fix

For merging groups:

If you have already migrated Group A and Group B:

  1. Delete groups A and B from target.
  2. Create Group C.
  3. Merge A and B from target to C with SID History.

If you have not yet migrated any groups:

  1. Create Group C.
  2. Merge A and B from target to C with SID History.

SIDHistory migrates and works correctly.



Additional Information

Formerly known as NETIQKB3940