sidHistory and security translation on ADMT version 2

[ride]

I have a simple question.. theres not much documentation on it on the
usage.. probably I cant decipher the content abt security translation
in ADMT v.2 tool.

here it goes:
I have a NT4 domain to migrate to W2K domain(inter-forest migration,
domain restructure). I migrated groups, users(with sid history),
passwords, (files and folders migrated with NTFS permission using
robocopy to a member server). users can logon to the new and old
domain and access the files and folders that are in the new domain. Do
I still have to do security translation with ADMT v.2 tool? Does this
sec translation clears the sidHistory? If not, what does it exactly
do...?

When i attempt to run security tranlation wizard, I need to input the
computer(s) to do the so-called security translation migration. which
server should I choose? the souce NT4 PDC or the destination W2K DC or
both?

Any experiences encountered and advice will be greatly appreciated...

sincerely,
Damon

 

[Liam Falcon]

The security translation is done to clean up the old
SID's from the ACLs on a server. You migrate with SID
history to maintain access to resources. Once you're
done with the migration, you can use the translation tool
to reACL the resources to the new SIDs on the new
domain. This is a cleanup method and should be done
PRIOR to turning off SID history.

Does this make more sense now? It's to reACL to remove
the OLD sids from the SOURCE domain and replace them with
the NEW sids from the TARGET domain.

*LCF

 

[ride]

Hi Liam, Thanks a lot. in short, in ADMT v.2, I enter the NT4
PDC(source computer) for the security translation? Will this be
sufficient for the domain migration? Is there need to remove
sidHistory? will the translation take care of it?

rgds