ADMT and SID Filtering

Discussion in 'Active Directory' started by Luiz, Aug 17, 2009.

  1. Luiz

    Luiz Guest

    Hi,

    I have a question about SID Filtering ad the use of ADMT and If anyone could
    help me I appreciate:
    - I will use ADMT to migrate objects from a forest to another, I must
    disable SID Filtering to migrate the objects?

    Thanks for while.

    Luiz
     
    Luiz, Aug 17, 2009
    #1
    1. Advertisements

  2. Luiz

    Luiz Guest

    Sorry, completing the information, the forests are Windows 2003 with SP2.

    Thanks.

    Luiz
     
    Luiz, Aug 17, 2009
    #2
    1. Advertisements

  3. Luiz

    Marcin Guest

    Luiz,
    no - you can still migrate objects between domains - however you will not be
    able to take advantage of sIDHistory attribute once the objects are
    migrated...

    hth
    Marcin
     
    Marcin, Aug 17, 2009
    #3
  4. Luiz

    Luiz Guest

    Hi Marcin, thank you for the response.
    Can you give me an example, please?

    Thanks a lot.

    Best Regards.

    Luiz
     
    Luiz, Aug 17, 2009
    #4

  5. Luiz,

    Are you asking if you must disable SID Filtering?

    If you are asking if you should disable, that is up to you, depending on
    what you want to do wtih the users that have a SIDHistory. What are your
    intentions? Do you want to allow the users to access the source domain's
    resources?

    The following provides more information:

    Configuring SID Filtering Settings: Domain and Forest Trusts
    http://technet.microsoft.com/en-us/library/cc772633(WS.10).aspx

    Disable SID filtering: Domain and Forest Trusts
    "Although it is not recommended, you can disable security identifier (SID)
    filter quarantining for an external trust ..."
    http://technet.microsoft.com/en-us/library/cc772816(WS.10).aspx

    Security Considerations for Trusts
    http://technet.microsoft.com/en-us/library/cc755321(WS.10).aspx


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup or forum to benefit from collaboration
    among responding engineers, and to help others benefit from your resolution.

    Ace Fekay, MCT, MCTS Exchange, MCSE, MCSA 2003 & 2000, MCSA Messaging
    Microsoft Certified Trainer

    For urgent issues, please contact Microsoft PSS directly. Please check
    http://support.microsoft.com for regional support phone numbers.
     
    Ace Fekay [MCT], Aug 17, 2009
    #5
  6. Luiz

    Luiz Guest

    Hi Ace,

    thank you for the response.
    So, I want to migrate users and groups and I intend the user´s permissions
    (rights) be migrated too.
    Must I disable the SID Filtering in the target too?

    Thanks again, Ace.

    Best Regards.

    Luiz
     
    Luiz, Aug 17, 2009
    #6
  7. In your scenario, I wouldn't want SID Filtering, because you want to allow
    access by SIDs.

    Ace
     
    Ace Fekay [MCT], Aug 17, 2009
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.