Resolution
goal
If I Translate Security in 'ADD' mode, do I have run it again later in REMOVE mode?
fact
Domain Migration Administrator 6.x
fact
Domain Migration Administrator 7.x
fix
Running Security Translation in REMOVE mode will only remove the Source Account SID's from the selected object DACL. This is a cleanup step to be used after the target accounts have been given the same permissions as their equivalent Source accounts by running Security Transltion in 'ADD' mode. If this step is skipped and the Source Domain is decomissioned, the Source Account will not be resolve and the DACLs will show an actual SID number in place of the source account. This will not affect the new target accunts access to the resource.
If I Translate Security in 'ADD' mode, do I have run it again later in REMOVE mode?
fact
Domain Migration Administrator 6.x
fact
Domain Migration Administrator 7.x
fix
Running Security Translation in REMOVE mode will only remove the Source Account SID's from the selected object DACL. This is a cleanup step to be used after the target accounts have been given the same permissions as their equivalent Source accounts by running Security Transltion in 'ADD' mode. If this step is skipped and the Source Domain is decomissioned, the Source Account will not be resolve and the DACLs will show an actual SID number in place of the source account. This will not affect the new target accunts access to the resource.
Additional Information
Formerly known as NETIQKB10864