Sharepoint User migration 1

[teqmod]

First off I am sharepoint challenged so please bear with me. We have purchased a company that has a sharepoint server which was connected to an NT4 domain. This network has been kept running for access to resources and a trust has been established so that AD accounts can access other resources on the network. AD accounts can access sharepoint and rights have been assigned. We are now preparing to shutdown the NT4 network. Most of the administration accounts and over 100 user accounts are all set up with the NT4 domain accounts. Is there a way to copy/migrate the account settings for these users to their respective AD accounts easily?

 

[psemianonymous]

I'm not an AD expert, but there should be something like a "historic RID" or a "historic SID" or something to that effect that you can copy from the old NT4 accounts to the new AD accounts that will keep the security ... identity for lack of a better word. It's possible.

I don't know about a Sharepoint-specific solution so I'll leave that answer to someone else.

 

[enwhysee]

If you install WSS SP2, the stsadm.exe tool will include a -o migrateuser command. The command will query AD for "SID history" that pseale mentions and migrate the user. You could use it as follows:

stsadm -o migrateuser -oldlogin DOMAIN\user -newlogin DOMAIN2\user2

To automate the operation for many users, you could use the SPUserUtil suite. For more information, check out:

http://blogs.msdn.com/krichie/archive/2006/02/18/534752.aspx