|
Question : could not verify auditing and tcpip client support on domains. will not be able to migrate sid's access is denied
|
|
INQUIRY: Getting an error when migrating the SID, windows 2000 to windows 2003 the error is following below: could not verify auditing and tcpip client support on domains. will not be able to migrate sid's access is denied
Steps had taken. using admt v2 created the dword: hkey_local_machine\system\currnetcontrolset\control\lsa\tcpipclinetsup port dword value is 1 trust is working fine able to migrate the user wihout sid Kindly do the needful
|
|
Answer : could not verify auditing and tcpip client support on domains. will not be able to migrate sid's access is denied
|
|
Better is to use AMDTv3
1. On all DC's failure auditing must be enabled: --> Policy -> Computer configuration -> windows settings -> security policy -> local policy -> auditing policy -> Audit Accountmanagement (failure and success) 2. On the destination and the source DC the following group policy should be configured simmilar: --> Policy -> Computer configuration -> windows settings -> security policy -> local policy -> security options -> Network Security: LAN Manager Authentication 3. Both Domain Admins should be member of the BuiltIn Group Administrators in the other domain 4. Set the registry key hkey_local_machine\system\currnetcontrolset\control\lsa\tcpipclientsupport to 1 on the source dc 5. Disable SID Filtering with netdom.exe and commandline -->On target dc: netdom trust {FQDN of target domain} /domain:{FQDN of source domain} /enablesidhistory:yes netdom trust {FQDN of target domain} /domain:{FQDN of source domain} /quarantine:no -->On source dc: netdom trust {FQDN of source domain} /domain:{FQDN of target domain} /enablesidhistory:yes netdom trust {FQDN of source domain} /domain:{FQDN of target domain} /quarantine:no 6. On the source DC create a local security group in the domain --> Name: NetBiosNameoftheDomain$$$$ for examble: subdomain$$$ 7. gpupdate /force on both domains 8. Test the trust in AD Domains and Trusts
|
|
|