Active Directory Parent-child domain user migration: Tfs&sharepoint issues Summary (ii)

Then the previous article, continue to summarize the problems encountered

IV: SharePoint account name is not updated automatically

Problem Description:

After the user migrates, the account name still displays the original login name

Problem handling:

After migration, run the command on the SharePoint server:

Stsadm-o migrateuser-oldlogin olddomain\xxx -newlogin newdomain\xxx –ignoresidhistory

This problem is still relatively simple to deal with, if the user is more, direct batch of script processing

V: TFS User Account Migration

About user account migration, after the migration, in the TFS server, some servers in the user account automatically updated in order to migrate the login name, some server user accounts are not automatically updated, restart is useless, There is no automatic update of the user account we have been manually added (next to the library to add or is very troublesome, mainly did not find the rest of the good way to batch processing) on it. After migration, note the site permissions for users in SharePoint, especially the TFS2013 version, because there are only 1 TFS2013, and there are not many users, all users who have lost permissions to SharePoint are also handled manually.

VI: TFS Server service Account Migration

Due to the environment is the migration of the production environment, all service accounts if the migration and then to change the identity of these, the problem and can not find where the service account has not changed, want to immediately recover is not. So the safe way is to use the service account of all the servers and migrate them in a replacement way. Replacement account New in a domain, to replace the service account in the B,c domain, because TFS is the development department to create their own new, so corresponding to each TFS server to create a new service account, and control the previous account permissions in the Active Directory, the group also added permissions in SQL, here next to the comparison is added.

Then is in the server service inside modifies the running service account, this is everybody knows the place, anyway sees can change the change.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;margin:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/85/E2/wKioL1etaRbDGm__AADGTmZuZLk385.png "height=" 252 "/>

Service inside change is not finished, continue to modify the IIS inside the application pool inside the identity, with the domain account also changed, SERVER03 and Server08 inside the logo change the way a bit different, 03 is in the attribute, 08 is in the advanced settings inside.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;margin:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M01/85/E2/wKioL1etaReg3h-VAAD2unK3ZIg751.png "height=" 237 "/>

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M01/85/E2/wKiom1etbRKw0eosAAEWvRtPOLs446.png-wh_500x0-wm_3 -wmp_4-s_2579599277.png "title=" 03IIS "alt=" Wkiom1etbrkw0eosaaewvrtpols446.png-wh_50 "/>

650) this.width=650; "Src=" Http://s2.51cto.com/wyfs02/M00/85/E2/wKioL1etbRPzYGruAAGE-lbpbCA849.png-wh_500x0-wm_3 -wmp_4-s_1245862877.png "style=" Float:none; "title=" 08IIS "alt=" Wkiol1etbrpzygruaage-lbpbca849.png-wh_50 "/>

Then, the TFS Management Console is also necessary to note that there are account permissions to add the place, do not miss.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;margin:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M02/85/E2/wKioL1etaRjBRiofAACDqzo6E3k383.png "height=" 199 "/>

Also, this is not finished, there is a SharePoint inside to add a new service account

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;margin:0px;padding-right:0px; "border=" 0 "alt=" image "src=" Http://s3.51cto.com/wyfs02/M00/85/E2/wKioL1etaRjgyH2_AAB_3ZEjPdo150.png "height=" 314 "/>

The most difficult to find is here, each point to see and then the account changed to a new service account. That's because I didn't change the two places, which led to the problem that my SharePoint service stopped automatically after it was started, and then it took me a lot of time to get it wrong.

650) this.width=650; "title=" image "style=" border-top:0px;border-right:0px;background-image:none;border-bottom:0 px;padding-top:0px;padding-left:0px;border-left:0px;padding-right:0px; "border=" 0 "alt=" image "src=" http:// S3.51cto.com/wyfs02/m00/85/e2/wkiol1etarmros_saadgdg2ldd0791.png "height=" 345 "/>

Because of the version issue, it's possible that the interface for each version of SharePoint is a bit different, but that's where the general need to change is.

After the change, disable the previous service account, restart the server, observe whether all services are started normally, and then the user's use whether there is a problem.

If there is no problem, then the proof of service account has been replaced, the old service account can be migrated or deleted (but it is recommended to observe a period of time, it is not allowed a few days after the customer will tell you where he used the account).

for TFS Server domain changes, stop service fallback domain is a faster method, there is no problem, I feel that ADMT migration computer is too slow, before migrating, it is best to ensure that the parent domain does not have the same name as the TFS server computer.

So much for the TFS and SharePoint issues that are involved in migrating users to a parent-child domain, in the hope of helping people who need to do a cross-domain migration of TFS.

This article is from the "Li Fei _ignore" blog, be sure to keep this source http://ignore.blog.51cto.com/2247529/1837293

Active Directory Parent-child domain user migration: Tfs&sharepoint issues Summary (ii)