Migrating Security Principals
One of the most critical aspects of a migration is how to move security principals (such as users, groups, and computers) from one domain to another. This can get somewhat complicated in that part of the SID for each security principal is a domain SID, which of course must be changed when moved to the new domain.
When you consider that the SIDs are used to regulate user access to resources on the network, migration must accomplish moving the users' information to the new domain while retaining their existing access to resources.
In Windows networks, user access to network resources is managed by the use of access control lists (ACLs) that specify SIDs of users and groups allowed to access the resource. For each resource ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access