ODMAD. Users are unable to access shared resource on the source domain after being migrated with SIDHistory
説明
User accounts were migrated from a domain A to a domain B, keeping the SIDHistory that allow these users to access shared folders hosted on the domain A. It also allows users to connect on applications hosted on the domain A. Users can access the folder content on domain A only if their user account of the domain A is set directly on the folder security. If they are member of a group, the access is denied. It also happens with the Home Folder set in the AD User profile. The network drive is not mapped because the user can’t access to the path.
原因
Permissions for resources on domain A are set by groups only and users' parent group(s) were not migrated
対策
To resolve the issue, a group, that user is a member of, should be migrated as well to the domain B.
