Clone PC with same Name and same SID

[Rob Burns]

Thanks to everyone for the plethora of information here; however, I
have a question that I have not seen specifically answered yet, so
forgive me if I just missed it. I think I know the answer, but have no
real-world experience with it, so I thought I'd ask you experts.

I have a member server that I have cloned (full tape restore + system
state) offline in the lab. I have NewSid on the ready and have used it
in the past with great success; however, the question at hand is if I
leave the clone server as it is with the duplicate name and SID and
pull the original server offline, can I then put the clone online
without AD balking? In theory I'm thinking that AD shouldn't care, but
I didn't want to guess incorrectly. =)

Am I completely off base here or is my logic somewhat on track?

Any input would be greatly appreciated!

Best regards,

Rob

 

[Paul Bergson]

One unique sid per domain, so if there is no duplicate on line then yes you
can.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Rob Burns]

Thanks Paul.

I thought so, but only was sure "in theory"

I appreciate the quick response!

~Rob

 

[Joe Richards [MVP]]

The SID that newsid changes has nothing to do with AD. Each computer has
two SIDs. The first is the SID in the domain on the computer object, an
attribute called objectSID which is used to represent the computer
across the network. The second is the local SID on the machine used for
the machine's local security principals. Changing that second SID will
have no bearing on AD.

joe

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

 

[Paul Bergson]

But there is no machine other than the original and the current clone with
this machine sid value. So there shouldn't be an issue.

--
Paul Bergson MCT, MCSE, MCSA, Security+, CNE, CNA, CCA
http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup

This posting is provided "AS IS" with no warranties, and confers no rights.