HP CIFS Windows 2000 Interoperability (October 2002)

CIFS/9000 and Windows 2000 Interoperability

Hewlett-Packard

Native Mode also allows group conversions from one group type to another:

• Between Security and Distribution Groups

• Between Universal Groups and Global Groups

• Between Universal Groups and Domain Local Groups

3.3.2 Dial-In Options

Some Dial-In options are only available in Native Mode (see Q193897):

• Control access through remote access policy

• Verifier caller ID

• Assign a static IP address

• Apply static routes

• Static routes

3.3.3 Intellimirror

IntelliMirror is an expanded and renamed feature set based upon Roaming Profiles.

IntelliMirror provides the primary benefits related to custom, mobile profiles:

• User Data Management – users have access to their data regardless of

the hardware that they logged onto

• Software Installation and Maintenance – users have “just in time”

application installations regardless of the hardware that they are logged

onto

• User Settings Management – user’s desktops are available regardless of

the hardware that they are logged onto

These features are available in Mixed or Native Mode, but the user must be on a Windows

2000 Pro client.

3.3.4 SIDHistory

SIDHistory is a very important migration concept that is interdependent with several

domain migration and restructuring tools: ADMT, ClonePrincipal, NetDom, and MoveTree.

SIDHistory is only available in Native Mode. This presents a paradox, because Mixed Mode

is a state intended to ease migration from NT4.0, and SIDHistory is a Native-Mode-Only tool

that is almost a necessity for migrating a file server environment from NT4.0 to Windows

2000.

SIDHistory addresses the issue of incongruous user accounts and access control entries

(ACEs) on access control lists (ACLs). When users are migrated from an NT4.0 domain to a

Windows 2000 domain, the Security Identifiers (SIDs) associated with their individual user

or groups changes. However, resources throughout the migrated domain likely retain the

ACEs with the NT4.0 SIDs of the old NT4.0 user. SIDHistory and the associated toolset

provide a mechanism for resolving this inequity.

However, the actual SIDHistory attribute that enables the functionality is located on the

Native Mode user access token only. There is no SIDHistory access token in Mixed Mode. If

domain migration is a key component of Windows 2000 implementation strategy, then