Viewing 1 reply thread
  • Author
    Posts
    • #1564387
      Alan Hawkins
      Participant
      Member Points: 103
      Rank: 2

      IDK if anyone else has had this issue. Trying to complete trust between xxxxx.com and yyy.xxxx.com and get to very end and it says cannot, because file already exists. Come to find out we have duplicate SID’s of two domains, one which is trusted and another not. And of course we’re in the process of flattening our domain structure, so add to this trying to get ADMT going.

      From what I see online, sysprep can fix the SID but I would have to leave the domain. The problem is, its the only DC on the domain. So I see two options:

      1) create a virtual DC, join domain, migrate FSMO over, take first DC out and fix, then rejoin, then continue with migration effort

      2) Skip migration and just create new accounts for everyone in new domain and just get rid of the old domain.

      Thoughts?

      fyi, Sysinternals suite has a SID tool, psgetsid.exe

    • #1564414
      Michael Pietroforte
      Keymaster
      Member Points: 32,919
      Author of the year 2018
      Rank: 4

      If you can, I would go for option 2. The thing is that whenever you do something that is a little unusual, it might cause problems in the long run. Even if the procedure is officially supported, you might run into some bugs because nobody at Microsoft seriously tests non-standard procedures.

      avatar
Viewing 1 reply thread
  • You must be logged in to reply to this topic.
© 4sysops 2006 - 2022

CONTACT US

Please ask IT administration questions in the forums. Any other messages are welcome.

Sending

Log in with your credentials

or    

Forgot your details?

Create Account