How does QMM and AD Processing Wizard handle the SID History attribute? Can they migrate/add multiple SID history attributes?
Can the AD Processing Wizard remove and clean up all present SID History attributes?
During migration or synchronization QMM will, if configured accordingly, copy the source objects SID and use this value to populate the SID History attribute of the target object. Since the SID History attribute is a multi-value attribute QMM can copy multiple values.
However when using the Active Directory Processing Wizard and performing a clean up the wizard (ADPW) will remove only the SID History which was added by QMM. If the target object already had an existing SID History then ADPW will not remove this value. Basically ADPW cannot be used to remove absolutely all existing SID Histories in target environment, it will remove only the values which were added by QMM.
ADPW will also not remove the SID History from absolutely all target objects, this is an incorrect expectation.
ADPW will remove the SID History only from objects which are present in the INI file which is being used by ADPW.
Please be careful when deciding to migrate the SID history. Examine the source objects and if they already have the SID History populated you might want to clean up the source environment prior to migration. QMM will be able to copy the existing attribute (like any other attribute), but QMM (ADPW) cannot be used later to clean up absolutely all values later.
ADPW will be able to delete the SID history which is equal to source users SID, but it will not remove the older multiple SID Histories.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center