Comments on: Using STSADM -o migrateuser on a re-created account http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/ It's a household name Mon, 30 Aug 2010 19:01:23 +0000 hourly 1 http://wordpress.com/ By: Ahmad http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7545 Ahmad Tue, 17 Aug 2010 16:05:54 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7545 The domain name is virtualpensionmanager.local which is same for both live and Test servers however both the domains are within completely separate networks. The domain name is virtualpensionmanager.local which is same for both live and Test servers however both the domains are within completely separate networks.

]]> By: Ahmad http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7544 Ahmad Tue, 17 Aug 2010 16:04:05 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7544 For the purpose, we had created an in-house Test environment; which is comprised of 2 “Virtual Machines”, ONE front end virtual server with Microsoft Windows 2008 and WSS 3.0 SP2 and ONE back end virtual server with Windows 2008, SQL SERVER 2008. Also, we kept the “domain name on test server exactly the same as on Live i.e. www.virtualpensionmanager.local” in a bid to reduce permission issues that would occur on Application restore. We thought since domain names are same so there won’t be any issues if we manually create the users in Test AD with the same permissions as on Live AD and they will be recognized by the restored application as well. But, when we restored the application (using STSADM backup/restore) it appeared that the Test server is not recognizing those accounts manually created in its AD. We did a some research on that and obtain an opinion from one of the experts, who informed us that there is a hidden unique id “Security ID (a.k.a sID)” associated to each user and when you manually creates a user it got change may be which might be the cause. Therefore, he suggested User Migration through ADMT v3.1 tool by Microsoft, which appears to be a very complex tool. Also, in a discussion with one of Microsoft TechNet guy he revealed that it doesn’t work for same domain names. Someone else told me to try Stsadm Migrateuser command on the test server. I created a user (with the same login names etc. as was on Live AD) and execute the following commands on my test server as: stsadm -o migrateuser -oldlogin abc.local/s.wilton -newlog abc.local/s.wilton -ignoresidhistory Also, tried with a Temporary account with ignoreSid flag but the error is same as below Error Message in both cases: "Cannot Complete the Action" Please, I desperately need a solution as the deadline is approaching fast I am stuck with AD users problem from quite sometime. Please suggest me what's the easiest possible way to migrate users from Live AD to Test AD or do something that my application start recognizing those users. For the purpose, we had created an in-house Test environment; which is comprised of 2 “Virtual Machines”, ONE front end virtual server with Microsoft Windows 2008 and WSS 3.0 SP2 and ONE back end virtual server with Windows 2008, SQL SERVER 2008. Also, we kept the “domain name on test server exactly the same as on Live i.e. http://www.virtualpensionmanager.local” in a bid to reduce permission issues that would occur on Application restore.
We thought since domain names are same so there won’t be any issues if we manually create the users in Test AD with the same permissions as on Live AD and they will be recognized by the restored application as well. But, when we restored the application (using STSADM backup/restore) it appeared that the Test server is not recognizing those accounts manually created in its AD.
We did a some research on that and obtain an opinion from one of the experts, who informed us that there is a hidden unique id “Security ID (a.k.a sID)” associated to each user and when you manually creates a user it got change may be which might be the cause. Therefore, he suggested User Migration through ADMT v3.1 tool by Microsoft, which appears to be a very complex tool. Also, in a discussion with one of Microsoft TechNet guy he revealed that it doesn’t work for same domain names.

Someone else told me to try Stsadm Migrateuser command on the test server.

I created a user (with the same login names etc. as was on Live AD) and execute the following commands on my test server as:
stsadm -o migrateuser -oldlogin abc.local/s.wilton -newlog
abc.local/s.wilton -ignoresidhistory

Also, tried with a Temporary account with ignoreSid flag but the error is same as below

Error Message in both cases: “Cannot Complete the Action”

Please, I desperately need a solution as the deadline is approaching fast I am stuck with AD users problem from quite sometime. Please suggest me what’s the easiest possible way to migrate users from Live AD to Test AD or do something that my application start recognizing those users.

]]> By: calin http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7540 calin Mon, 19 Jul 2010 17:48:12 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7540 Hi guys, We have just lost our Active Directory and we managed to create again all users with the same login details. Of course there are new SID so I had to run this migrateuser thing. I didn't got any errors but unfortunately for those lists (for example tasks list) which had some data linked to users "Person and Group field" it doesn't really re-map to the new user... We have SP 2010...Any ideas? Hi guys,
We have just lost our Active Directory and we managed to create again all users with the same login details.
Of course there are new SID so I had to run this migrateuser thing. I didn’t got any errors but unfortunately for those lists (for example tasks list) which had some data linked to users “Person and Group field” it doesn’t really re-map to the new user…
We have SP 2010…Any ideas?

]]> By: Inder http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7539 Inder Tue, 13 Jul 2010 15:09:40 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7539 Try to install the hotfix KB961176. the issue is fixed this article Try to install the hotfix KB961176. the issue is fixed this article

]]> By: Henry Ong http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7519 Henry Ong Tue, 06 Apr 2010 17:13:45 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7519 Thumbs up! Made good use of this today. Thumbs up! Made good use of this today.

]]> By: Niccollas http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7518 Niccollas Mon, 29 Mar 2010 14:21:30 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7518 great! thks great! thks

]]> By: Passer-by http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7493 Passer-by Thu, 14 Jan 2010 18:15:47 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7493 Rather interesting place you've got here. Thank you for it. I like such themes and everything that is connected to this matter. BTW, try to add some images :). Rather interesting place you’ve got here. Thank you for it. I like such themes and everything that is connected to this matter. BTW, try to add some images :) .

]]> By: Keith Richie http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7467 Keith Richie Tue, 03 Nov 2009 20:44:36 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7467 BryGuy, no way in the product itself to bulk migrate. It's an individual process. Of course you could script the calls to it for all of your users. BryGuy, no way in the product itself to bulk migrate. It’s an individual process.
Of course you could script the calls to it for all of your users.

]]> By: Bryguy http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7461 Bryguy Fri, 23 Oct 2009 16:43:07 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7461 Great post, is there any way to do a bulk user move? as in moving a hundred users or is it an individual process? Great post, is there any way to do a bulk user move? as in moving a hundred users or is it an individual process?

]]> By: StephanJade http://blog.krichie.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7459 StephanJade Wed, 21 Oct 2009 12:48:21 +0000 http://krichie.wordpress.com/2008/06/27/using-stsadm-o-migrateuser-on-a-re-created-account/#comment-7459 Great article as for me. I'd like to read more concerning that matter. Great article as for me. I’d like to read more concerning that matter.

]]>