duplicate SID due to ghost image

[Nenad]

What are major problems that will ocur in my single domain controlled by
Windows 2003 SE domain controller due to fact that I have 7 clients prepared
replicating first one with Norton Ghost 2003 assume they have same SID (IP
and computer name I change manualy before they rich domain).
Domain has interim forest functionality, and 2 BDC (NT4.0).
DNS service is active on W2003 server as well as Activ Directory service.
DNS service allow only secure dynamic update.
For now XP users experience part time problems using share drives but only
after some time. If they restar they could continue but not for a long period.
Could I change SID now, and do you see connection between this SID
duplicates and their problems.

[Scott Napolitan [Microsoft]]

You are going to have problems with this and I would suggest that you create
new Ghost images of machines that have been sysprepped before imaging. If
you run sysprep and then shut the machine down and image it from there it
will boot up into mini-setup manager with a new SID. Otheriwse you'll have
problems getting these machines to join the Domain properly and will
experience issues with the machine account trusts.

This posting is provided "AS IS" with no warranties, and confers no rights.

"Nenad" <Nenad@discussions.microsoft.com> wrote in message
news:537B8E2A-3837-40B3-9A79-94FD3BD6BFC3@microsoft.com...
> What are major problems that will ocur in my single domain controlled by
> Windows 2003 SE domain controller due to fact that I have 7 clients
> prepared
> replicating first one with Norton Ghost 2003 assume they have same SID (IP
> and computer name I change manualy before they rich domain).
> Domain has interim forest functionality, and 2 BDC (NT4.0).
> DNS service is active on W2003 server as well as Activ Directory service.
> DNS service allow only secure dynamic update.
> For now XP users experience part time problems using share drives but only
> after some time. If they restar they could continue but not for a long
> period.
> Could I change SID now, and do you see connection between this SID
> duplicates and their problems.
>

[Ryan Sokolowski [Microsoft]]

I echo Scott's encouragement to Sysprep your images prior to capturing them.
This is really the best way to operate.

Additionally, you can use a utility to change the SIDs afterward (if you
choose NOT to sysprep). SysInternals has a great one called NewSID found
here: http://www.sysinternals.com/ntw2k/source/newsid.shtml


--
Ryan Sokolowski
MCSE, CCNA, CCDA, BCFP
Microsoft Enterprise Engineering Center

This posting is provided "AS IS" with no warranties, and confers no rights.

"Scott Napolitan [Microsoft]" <scottnap@online.microsoft.com> wrote in
message news:OZxD$bJrEHA.2764@TK2MSFTNGP11.phx.gbl...
> You are going to have problems with this and I would suggest that you
create
> new Ghost images of machines that have been sysprepped before imaging. If
> you run sysprep and then shut the machine down and image it from there it
> will boot up into mini-setup manager with a new SID. Otheriwse you'll
have
> problems getting these machines to join the Domain properly and will
> experience issues with the machine account trusts.
>
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
> "Nenad" <Nenad@discussions.microsoft.com> wrote in message
> news:537B8E2A-3837-40B3-9A79-94FD3BD6BFC3@microsoft.com...
> > What are major problems that will ocur in my single domain controlled by
> > Windows 2003 SE domain controller due to fact that I have 7 clients
> > prepared
> > replicating first one with Norton Ghost 2003 assume they have same SID
(IP
> > and computer name I change manualy before they rich domain).
> > Domain has interim forest functionality, and 2 BDC (NT4.0).
> > DNS service is active on W2003 server as well as Activ Directory
service.
> > DNS service allow only secure dynamic update.
> > For now XP users experience part time problems using share drives but
only
> > after some time. If they restar they could continue but not for a long
> > period.
> > Could I change SID now, and do you see connection between this SID
> > duplicates and their problems.
> >
>
>

[snirh]

check out duplicate SID monitor, it allows you to monitor all the time the duplicated SIDs.
http://www.smart-x.com/?CategoryID=1...cleID=97&sng=1