Only some users and groups are being translated when running security translation. (NETIQKB20941)

fact
Domain Migration Administrator 7.x

symptom
Only some users and groups are being translated when running security translation.

cause

If you have added objects to a project, you must leave the previous objects selected also, in order for security translation for all objects to be successful.

For example:

1. Select User A, Group B.
2. Migrate User A, Group B.
3. De-select User A and Group B.
4. Select User B and Group C.
5. Migrate User B and Group C.
6. Translate security. Only User B and Group C will be translated.

fix

Make sure all objects are selected in the Select Objects Wizard. For example, User A, User B, Group B, Group C.

Also, check the ACL to make sure that the source domain accounts are present.  The source account must be present on the ACL, and that source account must have been migrated by Domain Migration Administrator (DMA) in order to translate security.

Formerly known as NETIQKB20941