[Samba] Domain SID

Sonic sonicsmith at gmail.com
Wed Jan 6 17:51:08 UTC 2021

On Wed, Jan 6, 2021 at 12:36 PM Dale via samba <samba at lists.samba.org> wrote:
> When moving from a classic domain to a Samba AD, I think it wise to
> follow Rowland's logic and provision a new domain to avoid all the GID
> issues.  UID's don't appear to be a problem, as they already exist in
> the recommended range.  However, I don't really want to copy all the
> local profiles to what Windows thinks are new domain users due to the
> new SID.  So, is there a way to get the best of both worlds and set the
> SID during provisioning or change it later?

I had no serious issues doing a couple of classic upgrades so I don't
think it's something to fear.
However I have wondered about doing a new provision with a small
number of network users and setting the domain-sid to be identical, as
well as setting the user sid's identically when adding the users. Not
sure if anyone has tried this but it seems on paper that it should
work and the previous classic domain users should get their previous
profiles when logging on.

More information about the samba mailing list