• Folder permissioning

    Hi All,

    Please could someone offer some help.

    I have used the Quest tool to migrate security groups and users from Domain A to Domain B. This has completed fully.

    I am looking to re-permission the current folder Security on our file server. I need bot…

  • Migration manager for Active directory

    Question: windows active directory migration using Migration manager for Active directory

    Scenario: Windows active directory forest (windows 2008) having multiple subdomain and tree. Forest Doman name is “company.com” and the sub domain name is NA.Company…

  • Questions: Trust and Domain Local group with respect to access token

    Hello IT Engineers,

    Scenario 1: A trust relationship is a link that is established between domains to enable users in one domain to be authenticated by a domain controller in the other domain. Trust relationships are authentication pipelines that must…

  • trust, sidhistory and workstation related questions

    Hi,

    As per discussions in earlier post, workstation criteria matters in authentication as long as there is trust from source domain to target domain and target user want to login on source domain joined workstation. However, with same trust direction…

  • Directory Synchronization vs. Migration

    Hello Engineers,

    I need to understand what exactly is the purpose of Directory Synchronization. How is this technically different from Migration. Can I use directory synchronization instead of migration to transfer directory objects (users, groups etc…

  • Access home drives and shares using migrated target domain account from source workstation & Resource process via Replace

    Hello IT Engineers,

    Q1: Does it make any difference if migrate target domain account (with sidhistory) try to access home drives and shares from source domain joined workstation? Does it have anything to do with domain membership of server where home drives…

  • Sidhistory removal from migrated Target domain local groups

    Hi Engineers,

    Hope you guys are doing great!

    Scenario:

    Domain Local groups with members were migrated from source domain to target domain using Sidhistory. After changing domain membership of resource server from source domain to target domain, those…

  • Security Descriptors Processing by ADPW

    Hi IT Consultants,

    I was reading MMAD user guide. I have few questions regarding Security Descriptor migration by ADPW. As per user guide,

    Security Descriptor migration rule—Select the way security descriptors of the matched source and target  objects will b…

  • Suggestion required

    Hi Guys,

    How do I acquire advanced knowledge of Active Directory. Please let me know what is the best way to be proficient in advanced AD knowledge and to have deep understanding. If possible, please share web link of reference materials or suggest name…

  • Processing by RUM and ADPW

    Hello IT Consultants,

    Greetings of the day!

    I have questions and confusion regarding Quest Migration tools RUM and ADPW. Hope you guys will explain this.

    Processing by RUM and ADPW. Let me explain what I meant to say.

    Q1: Resources e.g. File/Folder/Share…

  • Sidhistory behavior in Intra-forest AD Migration

    Hello IT Folks,

    As we know, Sid/Sidhistory of Domain Local groups don't cross trust boundary outside of the forest. But within the forest (Intra-forest) if Domain Local Groups were migrated from Domain A to Domain B along with Sidhistory. Then does Sid…

  • Order of Pre-migration, migration and post-migration activities

    Hello Guys,

    I have general query regarding Order of Pre-migration, migration and post-migration activities in Inter-Forest Active Directory Migration. So basically,

    Q1: What is correct order of Users, groups (out of Domain Local, Global and Universal)…

  • Role Based Access Control (RBAC) & Privileged Access Management (PAM)

    Hello IT Consultants,

    Could someone please help me practical implementation of RBAC and PAM solutions using native tool in AD environment (>5000 users)? Could someone please share practical implementation guide that covers planning, strategies and implementation…

  • Changing Scope of Domain Local Group during Migration

    Hello Tech Guys,

    Here is the scenario:

    Source Domain Local Group is entered in the ACL of the resource and resource is on Source Domain server. Source Domain Local Group has been migrated to Target Domain with sidhistory and during migration group scope…

  • Question related to Sidhistory

    Hello Guys,

    I'm very excited about my first post on the forum.

    After reading below support article link, I have confusion related to sidhistory. I hope you guys will explain this.

    https://support.quest.com/kb/72489/considerations-when-migrating-local…

  • ADPW usage question

    Hello Support Team,

    I've general question related to usage of ADPW tool. 

    Question: If resource is secured with Source Domain Local groups only && Resource Server (Source domain) has been moved to Target domain, then do I still need to process…

  • Questions regarding Sid, Sidhistory, trust and resource sharing

    Dear Support,

    Hope you guys are doing good.

    Please excuse me for little understanding. I have few questions that needs to be answered and explained.

    Q1: In case of forest trust and external trust, Sid and Sihistory of which groups (Domain Local, Global…

  • Access token related query

    Hello Support Representatives,

    I have general query regarding Access Token. I hope you guys will answer and explain it.

    So during migration, servers(containing resources) have been migrated from source domain to target domain. Source Domain Local groups…

  • Domain Migration: “Access Denied“ after Changing Group Type and resource access

    Hello

    Q1: As per https://activedirectoryfaq.com/2016/09/domain-migration-access-denied-group-type-change/ it says to keep authorization group "domain local" in source environment.  Then the types would be identic on both domains. So…

  • Behavior of Sid and Sidhistory

    Hello,

    I;ve general question regarding Sid and Sidhistory. Excuse me for little knowledge.

    Under what scenarios/situations, Sid or Sidhistory will be filtered out from the access token while accessing resources across the trust in another domain or forest…

  • Resource Processing Query

    Hello,

    Only users and groups migrated with sidhistory from source domain to target domain in Inter-Forest migration. However, resources are still in source domain. So after migration, do I still need to Re-ACL of all source domain resources meaning append…

  • How access is granted by source domain local group in target domain resource permission ACL (via migrated group membership or via sidhistory or both) and how exactly access check is performed?

    Hello,

    I've source domain local group applied on resource ACL. Resource have been migrated to target domain server along with ACL permissions as-is. Source domain local group have also been migrated to target domain using sidhistory and scope has been…

  • Re-process the ACLs using Revert

    Hello,

    I just need to know - Does Re-process the ACLs using Revert job work for "Append" and "Replace" both?

    Thanks

    Mark

  • Active Directory Processing

    Hello,

    Greetings of the day! Hope you guys are doing well.

     

    As per resource processing guide in Active Directory Processing, it says Add target users to source groups. This is the most common operation for ADPW. 

     Q1. I need to know what are the circumstances…

  • Process by ADPW

    Hello,

    Below are my questions:

    Q1) My question is does ADPW process group membership only if source objects were members of target groups prior to the migration?

    Q2) What would be possible scopes of target groups, if source objects were members of target…