• Directory synchronization for groups

    We have requirement of synchronizing 2000 groups between two forest (Say Target Company and Source Company). All 2000 groups are already present in target company with same name. We want to include these 2000 into our QMM synchronization scope. If we include…

  • trust, sidhistory and workstation related questions

    Hi,

    As per discussions in earlier post, workstation criteria matters in authentication as long as there is trust from source domain to target domain and target user want to login on source domain joined workstation. However, with same trust direction…

  • Sidhistory removal from migrated Target domain local groups

    Hi Engineers,

    Hope you guys are doing great!

    Scenario:

    Domain Local groups with members were migrated from source domain to target domain using Sidhistory. After changing domain membership of resource server from source domain to target domain, those…

  • Processing by RUM and ADPW

    Hello IT Consultants,

    Greetings of the day!

    I have questions and confusion regarding Quest Migration tools RUM and ADPW. Hope you guys will explain this.

    Processing by RUM and ADPW. Let me explain what I meant to say.

    Q1: Resources e.g. File/Folder/Share…

  • Sidhistory behavior in Intra-forest AD Migration

    Hello IT Folks,

    As we know, Sid/Sidhistory of Domain Local groups don't cross trust boundary outside of the forest. But within the forest (Intra-forest) if Domain Local Groups were migrated from Domain A to Domain B along with Sidhistory. Then does Sid…

  • Order of Pre-migration, migration and post-migration activities

    Hello Guys,

    I have general query regarding Order of Pre-migration, migration and post-migration activities in Inter-Forest Active Directory Migration. So basically,

    Q1: What is correct order of Users, groups (out of Domain Local, Global and Universal)…

  • Changing Scope of Domain Local Group during Migration

    Hello Tech Guys,

    Here is the scenario:

    Source Domain Local Group is entered in the ACL of the resource and resource is on Source Domain server. Source Domain Local Group has been migrated to Target Domain with sidhistory and during migration group scope…

  • Question related to Sidhistory

    Hello Guys,

    I'm very excited about my first post on the forum.

    After reading below support article link, I have confusion related to sidhistory. I hope you guys will explain this.

    https://support.quest.com/kb/72489/considerations-when-migrating-local…

  • ADPW usage question

    Hello Support Team,

    I've general question related to usage of ADPW tool. 

    Question: If resource is secured with Source Domain Local groups only && Resource Server (Source domain) has been moved to Target domain, then do I still need to process…

  • Domain Migration: “Access Denied“ after Changing Group Type and resource access

    Hello

    Q1: As per https://activedirectoryfaq.com/2016/09/domain-migration-access-denied-group-type-change/ it says to keep authorization group "domain local" in source environment.  Then the types would be identic on both domains. So…

  • How access is granted by source domain local group in target domain resource permission ACL (via migrated group membership or via sidhistory or both) and how exactly access check is performed?

    Hello,

    I've source domain local group applied on resource ACL. Resource have been migrated to target domain server along with ACL permissions as-is. Source domain local group have also been migrated to target domain using sidhistory and scope has been…

  • Active Directory Processing

    Hello,

    Greetings of the day! Hope you guys are doing well.

     

    As per resource processing guide in Active Directory Processing, it says Add target users to source groups. This is the most common operation for ADPW. 

     Q1. I need to know what are the circumstances…

  • Process by ADPW

    Hello,

    Below are my questions:

    Q1) My question is does ADPW process group membership only if source objects were members of target groups prior to the migration?

    Q2) What would be possible scopes of target groups, if source objects were members of target…

  • Resource Access - Sid vs Sid History vs group membership vs all

    Hello,

    This sounds very basic question. Excuse me for my little knowledge.

    However, I still need to fully understand how access is granted on resource (source domain / target domain) to any user (migrated with or without Sid History / newly created in…

  • DirSync merging with contacts is not copying all group memberships

    Hello, 

    Having an issue where we're not getting all group memberships merged to a target account, if those groups are in a different domain within the same target forest. 

     

    • Target domain is a member of a multi-domain forest
    • Forefront Identity Manager…