Alan Hawkins

Alan Hawkins started the topic Duplicate SID won't allow trust between domains, also middle of ADMT in IT Administration Forum 1 year, 3 months ago

IDK if anyone else has had this issue. Trying to complete trust between xxxxx.com and yyy.xxxx.com and get to very end and it says cannot, because file already exists. Come to find out we have duplicate SID’s of two domains, one which is trusted and another not. And of course we’re in the process of flattening our domain structure, so add to this trying to get ADMT going.

From what I see online, sysprep can fix the SID but I would have to leave the domain. The problem is, its the only DC on the domain. So I see two options:

1) create a virtual DC, join domain, migrate FSMO over, take first DC out and fix, then rejoin, then continue with migration effort

2) Skip migration and just create new accounts for everyone in new domain and just get rid of the old domain.

Thoughts?

fyi, Sysinternals suite has a SID tool, psgetsid.exe