Re: NT > 2003 domain name changes

anonymous_at_discussions.microsoft.com
Date: 10/21/03 

Date: Tue, 21 Oct 2003 00:53:50 -0700

The SIDS are migrating from one DC to another (new) one -
sidhistories is being used within the migration to AD
to "piggy back" the old SID on the new.

The SQL Servers are moving from SQL7 to SQL2K as well as
moving physical machine.

Basically, I want to take x number of databases that use
windows authentication over to a new sql server on a new
domain which house the old users & groups, using the same
SIDS.

Within SQL Server, I need the the windows logins
OLDDOMAIN\Group to be replaced by NEWDOMAIN\Group, whilst
maintaining the same SIDs and permissions so that user
access is not disrupted.

hmm.

Am I over complicating things this?

(thanks for your help to date btw, although I'm still not
100% sure about the required solution, it's certainly
focussing my thoughts!! :-)

>-----Original Message-----
>Ooops, I read a bit further - if the sids are staying the
same on the DC,
>then no action is required on your part.
>
>
>--
>Kevin Connell, MCDBA
>--------------------------------------------------
>The views expressed here are my own
>and not of my employer.
>----------------------------------------------------
>"Kevin" <ReplyTo@Newsgroups.only> wrote in message
>news:uMdpCV0lDHA.2068@TK2MSFTNGP09.phx.gbl...
>> nope, the sid of the login is the sid on the DC. It
updates the sid in
>> sysusers with the sid from syslogins.
>>
>>
>> --
>> Kevin Connell, MCDBA
>> --------------------------------------------------
>> The views expressed here are my own
>> and not of my employer.
>> ----------------------------------------------------
>> "njc" <anonymous@discussions.microsoft.com> wrote in
message
>> news:063c01c39717$239b7b20$a001280a@phx.gbl...
>> >
>> > I already thought of that one, but my understanding of
>> > sp_change_users_login is that it changes the SID of
the
>> > login to the SID of the user, which means I lose the
>> > original SID.
>> >
>> > Our NT > AD migration will retain the same user &
group
>> > SIDS. I also understand that SQL Server holds the
>> > domain/username data locally for the purpose of
>> > performance (e.g. when system_user is called it
doesn't
>> > need to make a call to the domain controller to get
the
>> > username), and that all authentication is achieved
using
>> > SID only.
>> >
>> > Thus whatever solution I deliver must restore the
logins
>> > linked to the users, with the same SIDs as before,
>> > otherwise windows authentication won't work - have I
got
>> > this right?
>> >
>> >
>> >
>> > >-----Original Message-----
>> > >You'll need to drop the old logins, add the new
ones, and
>> > then us
>> > >sp_change_users_login for each login/user
combination.
>> > >
>> > >--
>> > >Kevin Connell, MCDBA
>> > >--------------------------------------------------
>> > >The views expressed here are my own
>> > >and not of my employer.
>> > >----------------------------------------------------
>> > >"NJC" <anonymous@discussions.microsoft.com> wrote in
>> > message
>> > >news:092b01c39704$510521a0$a101280a@phx.gbl...
>> > >> Hi
>> > >>
>> > >> We are migrating our infrastructure from NT > 2003
>> > >> Server. The domain name will change as part of
this
>> > >> process. Additionally, our SQL Server databases
will
>> > move
>> > >> to a new machine at the same time.
>> > >>
>> > >> When I restore the database to 2003/SQL 2000
(having
>> > >> backed it up from NT\SQL7), how do I change the
database
>> > >> logins from OldDomain\Username to
NewDomain\username
>> > >> without dumping the logins and recreating them.
>> > >>
>> > >> Help!
>> > >>
>> > >>
>> > >>
>> > >
>> > >
>> > >.
>> > >
>>
>>
>
>
>.
>

Relevant Pages

  • Re: NT > 2003 domain name changes
    ... Can't use the DTS option as it doesn't retain the SID, ... -restore database to SQL2K ... - cut out logins that do not apply to the database at hand ... >> windows authentication over to a new sql server on a new ...
    (microsoft.public.sqlserver.security)
  • Re: Logins between SQL Databases on diff. servers.
    ... If they are NT logins and on the same domain you shouldn't have to do ... Errors After Restoring Dump ... for SQL Server ... > So how can I move the logins first with its passwords and SID? ...
    (microsoft.public.sqlserver.security)
  • Re: ADMT SID History Question ?
    ... I understand how SID history works ie the new user gets a copy of the ... resource knows to display the new migrated account. ... > Security translation is a function of ADMT 2.0 that updates access control ... > lists when migrating objects across domains. ...
    (microsoft.public.windows.server.migration)
  • Re: ADMT SID History Question ?
    ... I understand how SID history works ie the new user gets a copy of the ... resource knows to display the new migrated account. ... > Security translation is a function of ADMT 2.0 that updates access control ... > lists when migrating objects across domains. ...
    (microsoft.public.windows.server.migration)
  • Re: NT > 2003 domain name changes
    ... sp_change_users_login is that it changes the SID of the ... I also understand that SQL Server holds the ... Thus whatever solution I deliver must restore the logins ... our SQL Server databases will ...
    (microsoft.public.sqlserver.security)
Quantcast