How do I add SID History to an existing user account in the target domain without causing the accoun (NETIQKB43273)

  • 7743273
  • 02-Feb-2007
  • 14-Jan-2008

Resolution

goal
How do I add SID History to an existing user account in the target domain without causing the account to lose any account permissions?

goal
How do I migrate accounts while retaining account permissions?

fact
Domain Migration Administrator 6.x

fact
Domain Migration Administrator 7.x

fix

Use DMA to add SID History to an existing user account based on a matching samAccountName. If the source SamAccountName matches the existing target account, perform one of the following procedures:

To add SID History to an existing user account from a project:

  1. Launch the Specify Migration Options wizard.

  2. On the Naming Conflicts screen, select Replace and update conflicting accounts.

  3. Ensure the Remove existing user rights check box is clear.

  4. Complete the Wizard.

  5. Launch the Migrate User Accounts wizard and migrate the user accounts.

To add SID History when migrating user accounts using the Migrate User Accounts global wizard:

  1. Launch the Migrate User Accounts wizard and migrate the user accounts.

  2. On the Naming Conflicts screen, select Replace and update conflicting accounts.

  3. Ensure the Remove existing user rights check box is clear.

  4. Complete the wizard.



fix

If the source SamAccountName does not match the existing target accounts, you can use database modeling to map DMA to the correct target account.  Change the SamAccountName to match that of the target domain.  DMA then recognizes the conflict and merges the accounts.

Note: By default, if the SamAccountName does not match, DMA does not recognize any conflicts and does not merge the accounts.

For more information about using database modeling functionality to merge on existing accounts, see NetIQ Knowledge Base article NETIQKB42612, How can I have DMA merge on existing accounts in their current OU while migrating new accounts to a different OU?, https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB42612 .



note

For more information about  using DMA to migrate acounts with SID history, see NetIQ Knowledge Base article, What are the requirements for using Domain Migration Administrator when migrating with SID History?, https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB4365.



Additional Information

Formerly known as NETIQKB43273