Subincacl tool with netapp cifs migration to new domain
Hello
I have DomainA (old) DomainB (new). i am migrating services from DomainA. to DomainB. i have a netapp filer running CIfS in DomainA. i have two way trust between two doamins. All the security groups have been migrated from DomainA
to DomainB with sid history via Quest tool . now i need to repermission ntfs on all the shares with DomainB. I tried usign subinacl tool with following syntax without success
subinacl /outputlog=c:\output.txt /errorlog=c:\error.txt /subdirectories Z:* /migratedomain=domainA=DomainB=MAPFILE.TXT
where mapfile has a a mapping of between groups of DomainA and DomainB, Z is mapped drive to netapp cifs volume
but it errored out with following
Last Syntax Error:WARNING : /migratedomain=DomainA=DomainB=mapfile.txt : Invalid option : Z:\*
Hi,
Do you run the command from an elevated command prompt? Verify you have proper permission for the mapped drive. Please use the following version of SubInACL.
http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=23510
For domain migration:
SubinAcl /noverbose /subdirectories x:\*.* /changedomain=DomainA=DomainB
For server migration:
SubinAcl /subdirectories \\Destserver\Share\*.* /migratedomain=SourceServer=DestServer
Best Regards,
Aiden
Aiden Cao
TechNet Community Support
Similar Messages
-
Issue in SQL-server migration to new domain
Hello,
I have a scenario, where i need to migrate SQL 2005 servers db's ( around 30, small ones) to new server in a new domain. Destinationserver is 2012 R2, running SQL2014
Domains have trust between them, and users have already been migrated to new domain. Users are using the databases with NT authing from the new domain (new logins & users have been created to old sql-server).
I have backed up db's from old server and restored them in new server. After that, i restored logins with following article's script:
http://support.microsoft.com/kb/918992
I cleaned from the login script logins that are not in use, change the domainname to new in CREATE LOGIN phase (for the users who did not have already login from new domain) and the script ran without errors.
User Mappings are like they should be on logins, however, the user & schema names are indicating to old domain. If i try to change them, i receive error about SID mismatch. This affects also users, who have already had new logins for new domain, their
usernames on mappings are also changed to old domain's username. What is causing this?Hi,
Could you try the following to migrate the logins and check the result?
1. You may drop all the windows login. Modify the script generated by sp_help_revlogin step and replace create login
to drop login.
2. Use the script generated by sp_help_revlogin step to create
Logins. Modify login name to accommodate new domain name.
3. Grant server level roles using the output from:
Generate Server level role related info :
SELECT 'EXEC sp_addsrvrolemember ''' +
p.name + ''' , ''' + r.name + ''';'
FROM
sys.server_principals r
INNER JOIN sys.server_role_members m ON r.principal_id = m.role_principal_id
INNER JOIN sys.server_principals p ON
p.principal_id = m.member_principal_id
WHERE
r.type ='R'
Sample Output :-
EXEC sp_addsrvrolemember 'sa' , 'sysadmin';
4. Map the SIDS using below command for all DB by using ALTER USER. For example:
ALTER USER [DomainA\UserA] with login = [DomainB\UserA]
See:
http://blogs.technet.com/b/mdegre/archive/2011/06/27/can-i-move-sql-server-to-another-domain.aspx
Here some useful articles:
http://www.databasejournal.com/features/mssql/article.php/3922256/Re-generating-SQL-Server-Logins.htm
http://support.microsoft.com/kb/918992/en-us
http://support.microsoft.com/kb/240872
Thanks.
Tracy Cai
TechNet Community Support -
Since I am already a customer of Adobe, I need to know how to upload Adobe Reader 9, Adobe Acrobat XI Pro, and the other tools that go with both programs onto my new Windows 7 HP computer without having to fill out a new customer form or without having to pay for another Adobe membership as a new member? I need to know what to do step-by-step so that I can upload my Adobe reader 9, Adobe Acrobat XI Pro, and the other tools for the Reader and the Acrobat XI Pro.
You may send the step-by-step instructions to my e-mail address of [email address removed by host].
Thank you!
Dean W. BallewI have been trying to start my subscription again for my Acrobat XI Pro and for the annual subscription of the PDF Export for Word and Excel. The PDF Export expired according to my subscription list, but, I think that I had cancelled my Acrobat XI Pro of $ 29.99 monthly, so, I am wanting to presubscribe for it again, but, when I try to put my Code in for my Debit Card, it will not register with your company.
So, I do not know what to do to get it back again with my monthly and annually subscription payments for PDF Export and for Acrobat XI Pro. I have already downloaded the Adobe Reader XI onto my computer so I am set for that product. I just do not know what to do about the PDF Export and the Acrobat XI Pro to be able to get them started once again.
Dean W. Ballew -
AD User migration to new domain
I have SharePoint site in Domain A with 1000 users. There will be new domain B setup. I need to migrate ShrePoint Site from domain A to domain B. The AD users SID will remain the same. Below are two possible solution
1. Install new SharePoint in Domain A. Restore the site from Domain A to Domain B. Migrate all 1000 users using move-Spuser or Stsadm command.
2. Change the domain for System hosting SharePoint. Then migrate the 1000 users using move-Spuser or Stsadm command
Will the permission remains same in case user is migrated or what can be other issues.
Please remember to mark the replies as answers or vote as helpful if they help.So one thing to keep in mind is that disjoining/joining SharePoint farms from one domain to another isn't supported. Instead, the general process is to build a new farm in the target domain and recreate it, restoring backups of content/service application
databases as necessary.
Users cannot be moved from one domain to another without a SID change. Part of their SID stems from the domain they're a member of, and that changes when they're moved. There is a function called SIDHistory which stores previous SIDs from previous domains,
and this is commonly used. Despite that, you still need to issue a Move-SPUser, not only because their SID has changed, but because their domain name has changed.
One thing to note is that if you're using a Claims-enabled Web Application, you still must issue -IgnoreSID in the Move-SPUser cmdlet, regardless if SIDHistory is used or not during the migration.
Trevor Seward
Follow or contact me at...
  
This post is my own opinion and does not necessarily reflect the opinion or view of Microsoft, its employees, or other MVPs. -
Migrate to new domain and new SCCM
The migration scenario is this:
All Clients are in Domain1 and are managed through SCCM 2012 with System Center Endpoint Protection 2012.
Some of the clients need to join a new domain and be managed through a new SCCM 2012 R2 server with System Center Endpoint Protection 2012 R2.
There are no trusts between the forests. Do we need to uninstall the SCCM 2012 Agent and SCEP 2012 and then install the new SCCM 2012 R2 Agent and SCEP 2012 R2?
Or can we just uninstall SCCM 2012 Agent only and keep SCEP 2012 and later install.There are multiple ways to go about it.
Assuming that the AD forest is properly extended and the new site's info is properly published, then you can simply run a script:
http://msdn.microsoft.com/en-us/library/cc146558.aspx
http://gallery.technet.microsoft.com/scriptcenter/Change-sccm-configmgr-cf6e0327/view/Discussions
If the two assumptions above aren't correct, then the client has no way of getting the trusted root key gracefully for the new site and running ccmsetup is the best way.
The ccmsetup bootstrapper will download files as needed from the closest DP but (from memory) won't redownload files if they are already present in the ccmsetup folder.
A client push is probably the easiest method to initiate ccmsetup because it can be managed from a central location -- just make sure you select the checkbox for always reinstall. Of course, as mentioned above, if someone has previously used the "group
policy" to assign the site to your clients, you'll need to clean up that mess first otherwise the clients will always try to assign to the old site.
Jason | http://blog.configmgrftw.com -
Problems with the creation of a new domain using JCAPS6
Hello again,
I created a new domain, in addition to default domain1, with JCaps 6, following the steps in this link:
http://blogs.sun.com/polyblog/entry/creating_a_new_caps_6
I arrived to the step 4 of the procedure "install runtime installation" and I adapted install.xml file also (not only the install.properties), with the correct values concerning domainName and port.
When I run the ant-command then, I always get the following error:
C:\JavaCAPS6\appserver\bin>asant -f C:\JavaCAPS6\appserver\addons\caps\install.xml
Buildfile: C:\JavaCAPS6\appserver\addons\caps\install.xml
install:
install:
[sun-appserv-admin] Executing: list-lifecycle-modules port 19048 host localhost passwordfile "C:\JavaCAPS6\appserver\addons\caps\install.properties" user admin server
BUILD FAILED
C:\JavaCAPS6\appserver\addons\caps\install.xml:86: The following error occurred while executing this line:
C:\JavaCAPS6\appserver\addons\caps\applicationVerifier\server-init.xml:41: An exception occurred while running the command. The exception message is: CLI137 Command list-lifecycle-modules failed..
Total time: 1 seconds
How can i do to solve this problem?
Thanx
Edited by: fabrigas84 on Sep 3, 2009 8:36 AMHai!
Raise a message in sap support portal.
Regards,
Thanga Raj.K -
This is what I have:
A very outdated machine running a small domain, SBS 2003 and Exchange - this is the ONLY server currently.
This is what my boss ordered:
A Dell R210 II machine with Server 2012 Standard (and I downloaded the trial for Exchange 2013).
He wants the old server completely replaced and gone - with everything moved over (including Exchange) to the new machine. The main reason for the upgrade is that not all users can access email on their machines (Macs, new versions of Outlook, etc.)
I have set up a new standalone server before but never migrated one - and I've found that going from SBS2003/Exchange2003 to Server2012/Exchange2013 is not simple in the least.
I thought I could just set up the new server as a DC on the domain and have everything replicated to it from the source server. Then I could decommission the old server. I have been told that 1) I can't upgrade Exchange 2003 to 2013 and 2) that I shouldn't
put Exchange on a DC. What do you do if you only have the one server?Hi,
Just additional. Please also refer to following threads and article, then check if can help you.
Migrate
SBS 2003 to Windows Server 2012 Standard
Migration
SBS 2003 to Windows Server 2012 Standard
Transition
from Small Business Server to Standard Windows Server
Hope this helps.
Best regards,
Justin Gu -
Export list of users and passwords for migration to new domain
Hello,
i am in the planning phases of moving a SBS2008 domain to Windows Server 2012 AD domain. i have looked into ADMT but it refuses to install on SBS2008 (error: not a valid win32 application). is there another avenue i can look into that will help
me export all SBS domain users and their passwords, and import them into my 2012 domain?
cheers,
Jonathan HorneHi,
Regarding your request, if you want to migrate SBS 2008 to Windows Server 2012 Standard, please refer to the following article.
Transition from Small Business Server to Standard Windows Server
http://blogs.technet.com/b/infratalks/archive/2012/09/07/transition-from-small-business-server-to-standard-windows-server.aspx
As it mentioned, you could first join the Windows Server 2012 Standard server to the current SBS domain and promote it as an additional DC, then it will have the user objects on it.
Hope it helps.
Best Regards,
Andy Qi
TechNet Subscriber Support
If you are
TechNet Subscription user and have any feedback on our support quality, please send your feedback
here.
Andy Qi
TechNet Community Support -
Migration of SCCM 2012 SP1 to SCCM 2012 R2 in a new domain.
I am wondering if it is possible to migrate objects from a SCCM 2012 SP1 server in one domain to a new SCCM 2012 R2 server in another domain ?
I read this article, but it does not state this particular combination.
http://technet.microsoft.com/en-us/library/gg682006.aspx
Thx
ThomasFor Migrate from SCCM 2012 SP1 to SCCM 2012 R2 in same environment/Domain, it's support and applicable.
But migrate to new domain, it's not support. Also you can't migrate database for new domain or object. you will need to rebuild it.
Please remember, if you see a post that helped you please click "Vote As Helpful" and if it answered your question, please click "Mark As Answer"
Mai Ali | My blog: Technical | Twitter:
Mai Ali -
Migration to new g/l with migration cockpit
Dear all,
we need to describe to our customer the scenario related to migration to new g/l with migration cockpit; new g/l will be implemented this year and the customer will use the old sap till may 2015; then we will need to migrate data from old accounting to new g/l. I don' t know the tool 'migration cockpit', some of you can describe me which are the steps related to the migration with 'migration cockpit'?
thanks.
ElenaHi Elena,
This is a very complex area. You need to check the following notes:
1070629 - FAQs: Migration to General Ledger Accounting (new)
1014364 - New G/L migration: Information, prerequisites, performance
You may also have to contact SAP Migration Services
[email protected]
Regards,
Ravi -
We are getting ready to migrate from server core 2008 r2 hyper-v with failover cluster volumes on an iscsi san to server core 2012 r2 hyper-v with failover cluster volumes on a new iscsi san.
I've been searching for a "best practices" article for this but have been coming up short. The information I have found either pertains to migrating from 2008 r2 to 2012 r2 with failover cluster volumes on the same hardware, or migrating
to different hardware without failover cluster volumes.
If there is anyone out there that has completed a similar migration, it would be great to hear any feedback you may have on your experiences.
Currently, my approach is as follows:
1. Configure new hyper-v with failover cluster volumes on new SAN with new 2012 r2 hostnodes and 2012 r2 management server
2. Turn off the virtual machines on old 2008 r2 hyper-v hostnodes
3. Stop the VMMS service on the 2008 r2 hostnodes
4. copy the virtual machine files and folders over to the new failover cluster volumes
5. Import vm's into server 2012 r2 hyper-v.
Any feedback on the opertain I have in mind would be helpful.
Thank you,
RobHi Rob,
Yes , I agree with that "file copy " can achieve migration.
Also you can try "copy cluster wizard " :
https://technet.microsoft.com/en-us/library/dn530779.aspx
Best Regards,
Elton Ji
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected] . -
Anybody used PlateSpin or other V2V migration tool with Oracle VM?
We're actually trying to migrate a few XenServer guests over to Oracle VM, but would like a more comprehensive package. One that keeps coming up is PlateSpin, although I'm by no means glued to it as a solution. Ideally, this would be a reasonably flexible tool with p2v, v2v, and v2p. Our environment is currently Xen only (Citrix and Oracle).
886374 wrote:
In playing with OVM 3.0 so far, I see that local storage (as the accelerator cards would show up as) is not really appropriate for Production Systems. It appears I can create a Repository on these physical disks and then present them to the VM guest. Then add these cards as my Oracle ASM disks for my "fast" storage, and do the same with the FiberChannel storage for my "slower" disks. Because of the Local Storage used for part of the VM guest, we would not be able to Live Migrate or have High availability I believe. Is this correct? Correct.
If we have the two servers as mentioned above. Could I take the database VM down and move it to the other server (ie Cold Migration)? The local storage (ie the accelerator cards) could physically be moved from one physical host to the other, but I am not sure, since this is virtualized disk, if this would be allowed or how it could be recognized on the other Oracle VM Server. This might be a "dream", but might be something we would like to do if an emergency arose or if more maintenance needed to be done on Server 1. Any comments?You would have to shutdown the VM, migrate it to an unassigned folder, edit the VM, remove the local storage from Server 1, migrate to Server 2 and add the local storage from Server 2. Whether or not this means moving your hardware is up to you.
Does anyone have other solutions to run Solid State disks (approximately 2TB worth) and Oracle VM, running a single guest that runs the database? We have been unable to find iSCSI or FiberChannel enclosures that can handle solid state drives in the 1 to 2 TB range of capacity. So perhaps there are other enclosures out there that can act as Shared Storage that can operate with SSDs. Thank you for any comments and suggestions.I know the Sun storage appliances use hybrid storage, i.e. a mix of SSD/spinning disks, but I don't know the details. Our Exadata machines have 5TB of Flash storage per cell, so I know we have such options. -
I replaced the original hdd in my early 2008 iMac. I can't move my files that were backed up with Time Machine to my new hdd using Migration Assistant. When prompted to select the "from drive", the ext. hhd does not appears as a selection. Please help!!
I'd recommend staring over, Pondini has created an excellent guide on how to use Setup Assistant. I'd recommend begin reading Pondini Setup Assistant tips where he talks about "Second Chance." Assuming your Time Machine backup is sound the restore should be very smooth.
Roger -
Unable to open indesign after migration to new mac all other programs open and work.
Unable to open indesign after migration to new mac all other programs open and work. Why? Running Yosemite 10.10.1 Indesign CS5
The keyword is "migration." Migrating or copying files for Adobe applications usually does not work. Not all of the necessary subsidiary files are copied to the right location.
You'll need to first clean up the mess with this tool:
Use the CC Cleaner Tool to solve installation problems | CC, CS3-CS6
Then download an installer from here:
Other downloads -
We have migrated machines using ADMT tool but we have found some window 7 machines Group policy issues. We see that the computer GP is getting from the new domain but the users profile still has the old domain GP information. Any help on
removing the old GP objects and forcing the new domain User policy would be great. We have tried the basic troubleshooting gpupdate /force reboot etc.
ThanksHi,
Sorry for the delayed response.
First, please verify whether these domain users you mentioned belong to old domain or new domain.
If they belong to old domain the GP is right with no problem. If they belong to new, try following suggestions.
Please test these steps in one of the problematic computer. If it worked, then go on for others.
To avoid unexpected problems, please backup your register keys before following steps:
Open regedit.exe, and delete following keys:
HKLM\Software\Policies\Microsoft Key (looks like a folder).
HKCU\Software\Policies\Microsoft Key.
HKCU\Software\Microsoft\Windows\CurrentVersion\Group Policy Objects Key.
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies key
Exit the registry and restart.
Note: HKLM = HKEY_LOCAL_MACHINE & HKCU = HKEY_CURRENT_USER
If you have any feedback on our support, please click
here
Keep post.
Kate Li
TechNet Community Support
Maybe you are looking for
-
This only happens occasionally and the only reason why I found out it was firefox is by opening up task manager and selecting the Processes tab. There is no crash reporter or any thging to say there was a problem just a reduction in speed and perform
-
Report purchase price from Sales order to delivery.
Please, is there anyone knows a solution for a resumption of the purchase price was register in a libne of sales order when we created by the DI API corresponding delivery ? Edited by: Rui Pereira on Dec 23, 2008 3:08 PM
-
Quicktime vs preview in finder
I have been reading lots of posts about avi files and have the following question unanswered. Why can the finder (in column view) show a file with .avi extension but QT 7.1.x won't play it? Macbook Pro C2D Mac OS X (10.4.9)
-
How to remove an affect?
I was wondering how to remove a blur effect from my design that I created? Also was wondering how to crop using adobe illustrator?
-
How do you change the size and font of the menu items in iweb.
as i was working on my website recently i noticed that i could not figure out how to change the automatic menu bar at the top of the screen. i would like to make the font smaller and closer together and even centered so i can put more pages on the sa