Does DMA map the Authenticated Users group in the source domain to the Domain Users group in the tar (NETIQKB49897)

  • 7749897
  • 02-Feb-2007
  • 17-Apr-2008

Resolution

goal

Does DMA map the Authenticated Users group in the source domain to the Domain Users group in the target domain?



fact
Domain Migration Administrator 7.x

symptom

DMA is not migrating the source Authenticated Users group.



cause

By design, DMA does not migrate the Authenticated Users group from the source domain.



fix

There is no need or advantage to migrating the Authenticated Users group. Unlike the Domain Users group, members of the Authenticated Users group are not granted permission to Null session connections to other network resources

By default, Windows adds newly created user accounts to the Domain Users group. Any user who is authenticated in the domain is automatically considered part of the Authenticated Users group. There is no need to explicitly add members to this group.

However, if you need to explicitly include newly migrated user accounts in the target domain Authenticated Users group, add the user accounts to this group by running your preferred user account and group management tool, such as DRA.



Additional Information

Formerly known as NETIQKB49897