Add SIDHistory to account post migration

Question

Hi everyone,

after migrating users from the old DC (old_dc) to the new DC (new_dc) I realized that some users do not have the SidHistory. How can I do ?

I used PowerShell: $UserName = "NOMEUTENTE" $SIDHistoryToAdd = "SID DA AGGIUNGERE" $User = Get-ADUser -Identity $UserName $User | Set-ADObject -Add @{SIDHistory = $SIDHistoryToAdd}

But it gives me Access Denied, what am I doing wrong?

Answer 1

Hi Lino,

You need to cotinue using ADMT to address this task, specially with checking log if there sid history doesn't copy it.

Let me share you one resource to troubleshoot your process:

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/inter-forest-sidhistory-migration-with-admt

An additional resources with part of the execution of ADMT to deal with this migration:

https://learn.microsoft.com/en-us/answers/questions/338925/migrate-source-domain(old)-to-target-domain(new)-w?page=3
Cheers,
Luis