Post reply

Domain name change

  • December 6, 2005 at 1:29 pm

    #110956

    My (rather large) company just changed domains for almost half the employees (and most of the users in my group). Is there a way to edit the logins? They still show the old domains, but I haven't heard any complaints yet. I'm just waiting for the other shoe to drop. What all do I need to consider? Thanks!

  • December 6, 2005 at 1:37 pm

    #608042

    If your users are still working OK, then they also set up a trusted relationship between the two domains.  I have seen this before and left the Windows logins with the old domain prefix.  The trusted relationship allows you to reference the username by either domain prefix. 

    I am not a network guru, but what I have described has been my experience with this situation.

    John Rowan

    ======================================================
    ======================================================
    Forum Etiquette: How to post data/code on a forum to get the best help[/url] - by Jeff Moden

  • December 6, 2005 at 2:08 pm

    #608050

    Hi,

    There are some things. I am not sure if it was fixed in SQL Server 2000, but in SQL Server 7 several years ago the job could not be executed because its owner was the olddomain\username. So it was the name that was important. On the other hand for user's logins SID's are checked so when we had another domain change with logins moved with their SIDs to a new domain users did not have any problems

    Regards,Yelena Varsha

  • December 7, 2005 at 12:39 pm

    #608255

    You should contact your AD folks because the 'trust' relationship that was established could only be a transitory thing - like for the duration of the domain migration. I'd start developing a plan to change things over as soon as possible. There a lots of scripts on this site (and others) that will assist you in auditing users/groups/roles/permissions.

    RegardsRudy KomacsarSenior Database Administrator"Ave Caesar! - Morituri te salutamus."

  • December 7, 2005 at 12:44 pm

    #608256

    The trust is the reason why everything is still working as it was prior to the domain move; however, Rudy is correct in stating that it may be temporary in nature to mitigate problems stemming from the move.  You should contact your AD administrator and inquire as to how long they were planning on leaving the trust in place. 

    John Rowan

    ======================================================
    ======================================================
    Forum Etiquette: How to post data/code on a forum to get the best help[/url] - by Jeff Moden

  • December 7, 2005 at 12:47 pm

    #608257

    Thanks everybody!

Viewing 6 posts - 1 through 5 (of 5 total)

You must be logged in to reply to this topic. Login to reply