Authentication Wizard

Due to the numerous migration possibilities offered by Alter-Ego, up to 5 different user accounts can be required to complete each migration. The Authentication Wizard provides a user-friendly method to correctly set these authentication roles through simple questions about your migration.

The 5 authentication roles are:

• Administrator A: The account which performs initial operations (pre-domain join, if applicable), including removing a computer from a domain, if necessary. This account always requires local administrative rights in the pre-migration security context.
• Administrator B: The account which performs secondary operations (post-domain join, if applicable), including copying/modifying profiles. This account always requires local administrative privileges in the post-migration security context.
• Domain Join Privileges: The account with privileges to join a computer account to a new domain. This account must be a computer with the Join Computers to Domain user right (typically a Domain Admin account).
• Source SID Lookup: The account which performs SID lookups in the source context.
• Destination SID Lookup: The account which performs SID lookups in the destination context.

Depending on the type of migration, one user account may be used for more than one role.

The questions asked during the Authentication Wizard will vary depending on the choices made. Therefore, individual step-by-step guides are provided for each of the 3 basic authentication types: Domain Change Only, Profile Migration Only, and Profile Migration + Domain Change.

The Authentication Wizard can be run on any computer or group within the tree. If the selected node does not already have custom settings, the user will be warned that settings inheritance will be disrupted by this action as a new settings root will be created. See Settings and Inheritance for more information.