Problems with a migration AD

mabeledo

Hi, i have a problem migrating my Navision Attain Server (SQL) to Windows 2003. I pass te users in the Active Directory, but the SID is not the same, then Navision don't recognize the user .

Any idea???

Thanks.

Miguel Angel.

kine

If you move the DB into new domain, the SIDs are different. You must reenter the user names to use new SIDs.

mabeledo

Thanks Kine, but this is that i didn't want to do. I have 300 users and a lot of roles and i should reenter all.

I thought that i could translate the SID in the migration to avoid reenter the users.

kine

If there was only migration from Native DB to SQL, there is no need for translating the SIDs. They will be same. If you are moving into server in another domain, you can do this:

before migration, export (or copy&paste) columns ID and SID from the table Windows Logins...

After migration import the file through some dataport and do this>

For the imported ID create new record in Windows Logins table (by Validating the ID). Copy for this new line with new SID all lines from table Windows Access Control (2000000053) with Login SID = Old SID and save them with new Login SID.
You are done...

It is only few lines of simple code...

mabeledo

A good idea Kine. You are a genius!

I'm going to check it.


I'll tell you.

kine

I used it one month ago when we were moving to new domain... :-)

mabeledo

I'm trying now, but the process with the Windows Login table is very slow. Exporting with a Dataport, for each record, DB search in the Windows Access Control table.

...patience!

kine

All operations with AD in Navision are slow... We have only something around 40 users in the DB - it was fast...

mabeledo

Hi Kine, sorry by as much annoyance, but when inserting a record in table Windows Login by validating the ID, indicates that cannot be done because ID is a flowfield and should begin with "Sum(..."

kine

Ok, sorry, I forgot that... you must find the SID in virtual table 2000000050 Windows Object...

dbezzant

I am trying to do the same thing here, but don't understand how the Windows Object relates to the SID

please advise.

kine

Just filter the table "Windows Objects" for ID=User Name and you will get SID in the SID field. You can use this SID to insert the user back into the "Windows Login" table to insert the correct user back into the system with new SID. And you will use same new SID to insert the user roles into "Windows Access Control" table.