WIN2K: SID & Large # of Users Issue

I am looking for thoughts from representatives who have a large number of users on TeamSite. You can define large number of Users as high hundreds to low thousands.

How does one handle the growing number of unidentifiable user accounts (SID problem) as are removed from the TeamSite environment? Has a process and/or code implementation helped?

System Configuration:
All Users are domain-users on a Window 2000 server
Running TeamSite 5.52 SP2

Find more posts tagged with

Comments

Jeremy

You could use iwidmap to create an output file of all users and groups. Then edit these files so that the user SID that has been removed is reassigned to another user.
Then rerun iwidmap to import these new files.
I have found that to be able to see the changes in Teamsite a reboot may be necessary.

For more information see the CLT or Admin manuals.

Hope this helps,

Jeremy

Adam Stoller

I believe you can use iwstoreadm to deactivate and then reactivate the store to get the ID-mapping changes to take effect - it's a little less intrusive than a reboot...

--fish
(Interwoven Senior Technical Consultant)

Ottawa_IWOV

All,

I am in the middle of this process and would like some help. I do a dump for the backing store:

iwidmap -u -x temp.xml e:/iw-store/temp

What is the appropriate way to update the XML file?

Example:

<RECORD>
<TOKEN data = "102"/>
<ID data ="S-1-5-21-214702359-1251950177-1603545085-1009"/>
<NAME data="NCAP009\editor"/>
</RECORD

Do I simply change NCAP009\editor to the username on the server I want in place? If so, I have done that. Then I save the file and do the following

iwidmap -u -i temp.xml e:/iw-store/temp

But it doesn't change the SID to the new user. The only way I am successful is if I do a

iwidmap -u -c NCAP009\editor NCAP010\ts-editor e:/iw-store/temp

This works fine, but obviously is not feasible seeing we have such a large number of users to change.

Any help would be great.

Thanks.

Lucas Cochrane
lcochrane@deloitte.ca

Jeremy

Hi,

Just a silly question : did you reboot or run iwstoreadm to reactivate the backing store?
If you have then I am not too sure what you might be doing wrong.

Jeremy

Ottawa_IWOV

Yeah I did both. But it really only seems necessary to do a iwstoreadm -d and -a

Lucas Cochrane
lcochrane@deloitte.ca

Migrateduser

When you reinsert the changed file you will have to give the -a option so that new sid's are looked up for the changed user.

So the command should be
iwidmap -u -a -i temp.xml e:/iw-store/temp

Let me know if this works.