Will the Analyze button work for migrated Global Groups that are members of Local Groups? (NETIQKB36435)

  • Document ID:7736435
  • Creation Date:02-Feb-2007
  • Modified Date:08-Sep-2008
    • Micro Focus Products:
      Domain Migration Administrator

Resolution

goal
Will the Analyze button work for migrated Global Groups that are members of Local Groups?

fact
Domain Migration Administrator 7.x

fix

Analyze will not select computers in this scenario.  

Please refer to the following scenario for an explanation:

  1. Migrate Global Group Accounts.
  2. 'Global Group Account' is a member of Local Group Account on Member ServerA.  LGA has been used to apply all permissions for ServerA.
  3. When the Impact Analysis reports are run, it will report back that LGA had permissions on Member ServerA.  When the Translate Security Settings wizard is used, you select GGA because that was the one that was migrated.
  4. DMA searches the AccountRefs table and finds nothing for GGA.  Therefore, when using the Analyze button, Member ServerA will not show up because the permissions were granted to LGA instead of GGA.

It will work if you migrated and selected LGA, but the Local Group on Member ServerA will be translated to the target Local Group. In addition, the Analyze feature was not designed to work with accounts that were migrated with SID History.



Additional Information

Formerly known as NETIQKB36435