How do I move the security model from one Directory and Resource Administrator server to another man (NETIQKB6509)

Warning: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. NetIQ Technical Support cannot guarantee that problems resulting from the incorrect use of the Registry Editor can be resolved. Make sure that you back up your Registry prior to making any changes.

Goal

How do I move the security model from one Directory and Resource Administrator server to another managing different domains?

Fact

Directory and Resource Administrator 6.x
Directory and Resource Administrator 7.0
Directory and Resource Administrator 7.0 SP1

Fix

The Directory and Resource Administrator (DRA) security model can be moved between two isolated DRA environments as long as the domain names and structures are the same.  If the domain names or structures are not the same, copying the Security key from the registry of one machine to another will not work.  The ActiveViews, Assistant Admins and Rule definitions reference objects that may not be in the managed domains and thus will not be valid.  For DRA versions 7.5 and later, this approach is not valid as security model information has been moved beyond just the Security key in the registry.

Please contact NetIQ Technical Support for assistance.  This feature is has not been tested and is unsupported.

Note

In certain instances the rule in Directory and Resource Administrator is associated with the SID of the user account or group and may cause problems.

Note

Warning: Using the Registry Editor incorrectly can cause serious problems that may require you to reinstall your operating system. NetIQ Technical Support cannot guarantee that problems resulting from the incorrect use of the Registry Editor can be resolved. Make sure that you back up your Registry prior to making any changes.

Formerly known as NETIQKB6509