What is the best practice for using 'Map and Merge' to map one source group to three or more target (NETIQKB26869)

  • 7726869
  • 02-Feb-2007
  • 17-Oct-2007

Resolution

goal
What is the best practice for using 'Map and Merge' to map one source group to three or more target groups?

fact
Domain Migration Administrator 7.x

fix

The following is recommended for using 'Map and Merge' to map one source group to three or more target groups:

  1. Create the groups with the appropriate names in the target domain using Active Directory Users and Computers.
  2. Use the Map and Merge Wizard in the Domain Migration Administrator project to map the source group to the newly created target group.
  3. Migrate the users and associated groups contained in that project.  DO NOT choose the migrate members of the groups selected option.
  4. Translate security in Add mode using the Project wizard.

Repeat this process for each project.  This will result in the correct group membership and the correct security translation for each group.  Please note that security translation will only be correct for the specific target group that was created in step 1 for each project.  This means that you will not be able to translate security for the group created in your first project, after you have mapped the group in the second project.  This holds true each time you re-map in another project.  It is very important that you complete all security translation in Add mode before you move on to the next project.

When you need to perform security translation in Remove mode, you should perform this from your third or last project in which you have performed the map and merge.



Additional Information

Formerly known as NETIQKB26869