Q: How can I compare the SID in the SouceDomain and the SIDHistory in the target domain to see if the migration medn well?
A: There are a couple of methods:
1) Use ldp.exe
Start ldp.exe
Choose Connection/Connect…
(Type server or leave blank to connect to localhost)
Choose Connection/Bind… to select user.
(leave blank for current user)
Choose View/Tree… to select base DN
(leave blank for current domain)
Browse to a user to see the attributes for that user
Do this in both domains and compare the ObjectSID attribute for the user in the Source domain with the SIDHistory attribute for the same user in the TargetDomain.
Note: Different versions of ldp.exe display SID differently
2) Use Adsiedit.msc
Start Adsiedit.msc
Browse to the user and view attributes
Do this in both domains and compare the ObjectSID attribute for the user in the Source domain with the SIDHistory attribute for the same user in the TargetDomain.
Leave a Reply