locked
Domain account migration RRS feed

  • Question

  • Hi, here follows the current scenario:

    * Our farm is running MS SharePoint Server 2007 SP2.

    * Our corporate, is migrating all accounts from DomainA to DomainB. For example, user DomainA\XXX will be migrated to DomainB\XXX.

    * DomainA and DominB are with trusts between them.

    I would like to know the possible consequences of this account migration (I think catastrophic) and whether there are tools or best practices able to support this use case.

    About migration on users I only know that sid user history will be preserved. But I'm not sure that SharePoint will still recognize the correct user after migration has been performed.

    Thursday, April 19, 2012 7:20 AM

Answers

  • I think this should help to migrate the service account: http://support.microsoft.com/kb/934838/en-us

    There is a [IgnoreSidHistory] parameter you can specify in migrateuser command:
    More info: http://technet.microsoft.com/en-us/library/cc262141(v=office.12).aspx

    I suggest to test this on some other test farm before using it on PROD (of course you will, just a reminder :) )

    Hope this helps,


    Regards, Rohan --Please mark as "Answer" if the post resolve your issue--

    • Marked as answer by Emiliano Poggi Thursday, April 19, 2012 12:54 PM
    Thursday, April 19, 2012 11:26 AM

All replies

  • You'll have to use the "migrateuser" command from STSADM against the sites/apps for all the user accounts once new domain account is created.


    Regards, Rohan --Please mark as "Answer" if the post resolve your issue--

    • Proposed as answer by Paul Turner _ Thursday, April 19, 2012 12:22 PM
    Thursday, April 19, 2012 8:49 AM
  • Thanks, didnt know about this stsadm operation.

    What about if one of the accounts that will be migrated is a service account used to run the sharepoint services?

    And in another scenario where domains are not with trusts between them, no sid history preserved, will this operation still work fine?

    thanks a lot


    Emiliano

    Thursday, April 19, 2012 8:57 AM
  • I think this should help to migrate the service account: http://support.microsoft.com/kb/934838/en-us

    There is a [IgnoreSidHistory] parameter you can specify in migrateuser command:
    More info: http://technet.microsoft.com/en-us/library/cc262141(v=office.12).aspx

    I suggest to test this on some other test farm before using it on PROD (of course you will, just a reminder :) )

    Hope this helps,


    Regards, Rohan --Please mark as "Answer" if the post resolve your issue--

    • Marked as answer by Emiliano Poggi Thursday, April 19, 2012 12:54 PM
    Thursday, April 19, 2012 11:26 AM