[cisco-voip] CCM6 with AD integration - moving users to new ADdomain

[Dane Newman]

They will keep the same Sam but not sid you might bethinking of the  
sid history attribute which is migrated to retain access to resources  
but is stripped at the end of a migration for securty best practices

Sent from my iPhone

On Jan 5, 2009, at 5:19 AM, <Thorsten.Mayr at barclayscapital.com> wrote:

> If they do a proper migration... They will keep the same SAM/SID and  
> you
> should be fine, I haven't done it myself with respect to CUCM, but I
> would assume if you allow both OU's in the LDAP synch.. When they move
> them over, you might be fine...
>
> However test and confirm this in the lab / with your AS team first...
>
> It maybe that CUCM thinks when it can't see it via one query that the
> account is indeed inactive... Need to read up if CUCM copies the  
> account
> and what other references are being added when it does.
>
> Easy test would be, add a different OU to be synched... Move a user  
> into
> that OU and see what CUCM thinks.. Verify with your AD team how they  
> are
> performing the migration... And tell them to do it clean :) so users
> keep sid/sam.
>
> Cheers
> T
>
>
>> -----Original Message-----
>> From: cisco-voip-bounces at puck.nether.net
>> [mailto:cisco-voip-bounces at puck.nether.net] On Behalf Of MILLS, Mark
>> Sent: Monday, January 05, 2009 1:24 AM
>> To: cisco-voip at puck.nether.net
>> Subject: [cisco-voip] CCM6 with AD integration - moving users
>> to new ADdomain
>>
>>
>> Hi,
>>
>> Our current CCM6 installation uses Active Directory
>> syncronisation for all end users to a Windows domain.
>>
>> In the near future, due to company acquisitions, the Windows
>> Admin groups are creating a new Windows AD domain and all
>> users will be moved over to the new domain and the old one
>> turned off.  The users will be keeping the same username
>> format and their telephone details etc will be the same in
>> the new AD structure that is being created.
>>
>> Does anyone have any experience on what this would do to the
>> users in CCM, and how I would go about syncing against the
>> new domain, but keeping all the users, profiles and
>> preferences the same to cause
>> minimum disruption to the end users?    Im hoping it will be as  
>> simple
>> as pointing CCM at the new AD servers and it will figure
>> everything out, but nothing is ever as simple as I hope  :)
>>
>> Thanks in advanced,
>>  -  Mark
>> "Warning:
>> The information contained in this email and any attached
>> files is confidential to BAE Systems Australia. If you are
>> not the intended recipient, any use, disclosure or copying of
>> this email or any attachments is expressly prohibited.  If
>> you have received this email in error, please notify us
>> immediately. VIRUS: Every care has been taken to ensure this
>> email and its attachments are virus free, however, any loss
>> or damage incurred in using this email is not the sender's
>> responsibility.  It is your responsibility to ensure virus
>> checks are completed before installing any data sent in this
>> email to your computer."
>>
>>
>> _______________________________________________
>> cisco-voip mailing list
>> cisco-voip at puck.nether.net
>> https://puck.nether.net/mailman/listinfo/cisco-voip
>>
> _______________________________________________
>
> This e-mail may contain information that is confidential, privileged  
> or otherwise protected from disclosure. If you are not an intended  
> recipient of this e-mail, do not duplicate or redistribute it by any  
> means. Please delete it and any attachments and notify the sender  
> that you have received it in error. Unless specifically indicated,  
> this e-mail is not an offer to buy or sell or a solicitation to buy  
> or sell any securities, investment products or other financial  
> product or service, an official confirmation of any transaction, or  
> an official statement of Barclays. Any views or opinions presented  
> are solely those of the author and do not necessarily represent  
> those of Barclays. This e-mail is subject to terms available at the  
> following link: www.barcap.com/emaildisclaimer. By messaging with  
> Barclays you consent to the foregoing.  Barclays Capital is the  
> investment banking division of Barclays Bank PLC, a company  
> registered in England (number 1026167) with its registered offi!
> ce at 1 Churchill Place, London, E14 5HP.  This email may relate to  
> or be sent from other members of the Barclays Group.
> _______________________________________________
> _______________________________________________
> cisco-voip mailing list
> cisco-voip at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-voip