Resolution
What is the syntax to clone a group from one domain into another using the Directory and Resource Administrator Command Line Interface?
fact
Directory and Resource Administrator 6.x
fact
Directory and Resource Administrator 7.x
fix
The following example for cloning a group from one domain to another must be run from the \Program Files\NetIQ\DRA prompt on a computer with the CLI installed:
EA GROUP new_group_name CREATE CLONE:source_domain_name\group_nameOU:OU=OU_name,dc=domain_name,dc=com
The above syntax clones the following attributes:
- Group type
- Group scope
- Description
- Members
note
If you want to specify the name of an enterprise OU, use the following format:
OU=OU,DC=domain,DC=toplevel
For example, to specify the SALES OU in the HOUSTON.LOCAL domain, type:
OU:OU=SALES,DC=HOUSTON,DC=LOCAL
If you want to specify the name of a built-in OU, use the following format:
CN=OU,DC=domain,DC=toplevel
For example, to specify the Users OU in the HOUSTON.LOCAL domain, type:
OU:CN=Users,DC=HOUSTON,DC=LOCAL
When you create or clone a group, you must specify a Windows 2000 OU. You do not need to specify an OU for a Windows 2000 member server.
note
The Directory and Resource Administrator (DRA) server uses the specified group as a template to create a new group. The DRA server then adds all members from the cloned group to the new group. If applicable, the DRA server also adds the new group to the ActiveViews of the original group.
In a Windows NT or mixed-mode domain, the DRA server assigns the same type from the cloned group to the new group. In a Windows 2000 domain, you can specify the group type.