Does the active directory migration tool keep the same user SIDs

active-directoryadmt

I have to do a migration of my active directory to a new domain. I know that a lot of the SharePoint and SQL applications we run use domain accounts inside them and I'm worried how the migration will affect them. I'm assuming that as long as the account keep the same SID in the transfer I should be okay. Will it keep my SIDs the same?

Best Answer

An account cannot maintain its SID when it is moved between domains because the first portion of the SID is domain-specific. You can use the sIDHistory attribute to keep a list of old SIDs assigned to a user account inside the new user account object. Have a look at this document, it explains sIDHistory in the section "Migration with SID History":

Related Topic