Does TS 5.5.2 on W2K support SID history

Bowker

We are migrating from an old NT-domain security system to Active Directory. Our security guy sent me the following question:

We have a global group WEB-IW-CM in our old domain. All NAM-MD-01 users in that group have access to the proper folders/workareas in TeamSite. When we migrate our groups (nam-md-01\WEB-IW-CM) to our new domain, ENT it includes SidHistory. When we migrate a users to our new domain, ENT, the users no longer have access even though they are in WEB-IW-CM. (both the NAM-MD-01 and ENT versions)

The global groups that were migrated all include SidHistory. The user accounts all include SidHistory.

Does the content manager product support SidHistory? Are there any known issues?

Migrateduser

The issue is that even with migrating the users while preserving SIDhistory the SID's in the new domain will be new (different SID's in the new domain).

However, this should not be a big problem in TS5.5.x as you can adjust the SID's used by TeamSite using the iwidmap tool.

Again the issue is that the SID's are not exactly the same between domains (and there is no way of making the SID's to be the same that I know of). This is the same problem that you would have with local accounts if you moved a backing store from one machine to another.

overlay.PNG