Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Multiple Forest - Cross Forest Migration - I want to lose SIDs....

Status
Not open for further replies.
Jul 5, 2001
143
US
Now, I know the first question is WHY would you want to lose the sids on all of the objects in the originating forest. The complex answer is because I have to. I have been tasked with moving an entire domain, which is empty today, but won't be three years from now, and sending the equipment and all installed software to a client to be added to their AD Forest. The problem is that this domain will be populated with customer accounts and I have to remove them all from the dc, without disturbing the data and installed applications on it. I also have to guarantee that the log files are empty, registry entries deleted and sid history unrecoverable. Is there an easy way to do this... Right now, I am in development, so I can try anything, but I need to have a solution in place so this project can go live within a three week timeframe...

Unfortunately, that gives me less than a week to propose, document and implement a solution... Any help would suffice... And one more thing... I am not in any way an AD expert, I have less than 3 years experience, you don't have to talk slow, but detailed works best...

Thnxs...

debonairOne

I look in the mirror and what do I see...
 
the easiest way is to script the clearing of the attribute.

are you familiar with vbscript/ADSI?

-Brandon Wilson
MCSE00/03, MCSA:Messaging00, MCSA03, A+
Manager - Global AD Operations
ACS, Inc.
 
scripting, no... ADSI, minimal... sorry...

debonairOne

I look in the mirror and what do I see...
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top