Forum Discussion

ben_gues's avatar
ben_gues
Copper Contributor
Jun 10, 2022

Automatique or quick Security groups replacement on SharePoint sites

Hi everyone,

After a user’s migration from a domain A to a domain B (same forest) we are working now on the security groups.

The client wants us to create similar security groups (with same members) on the domain B, but the name should be different. (New naming convention),

The client wants to avoid the use of ADMT with the SID history 

 They are around 900 security groups used on 8000 SP sites

 

The question /challenge:

Is it possible to update/replace the groups automatically / quickly on the SP sites ?

something like > for the group DA-direction replace it by DB-direction 

I know that Sharegate could have this kind of option (mapping) but used as far as i know only in the case of a migration from SP onprem to SP online and not on a similar site (source and target).

I've seen some posts talking about Power Automate... is this could be an option ? 

 

Thanks 

BG

 

 

 

 

  • mr_w1nst0n's avatar
    mr_w1nst0n
    Iron Contributor

    ben_gues 

    are you referring to SP On-Premise or Online ?

     

    I'm confused because the label says Online but you were describing a migration from domain A to domain B.

    • ben_gues's avatar
      ben_gues
      Copper Contributor

      mr_w1nst0n 

      Hi,

       

      actually it was an active directory migration not Sharepoint 

      We've migrated the users account from a domain to another and now we need to deal with the security groups. (used by shrepoint online) 

      thanks 
      ben

       

      • mr_w1nst0n's avatar
        mr_w1nst0n
        Iron Contributor

        ben_gues Ok thanks for the clarification.

         

        Based on my experience:

         

        If you just need to rename a SharePoint Group you can do it via PowerShell.

        You have a sample here as a starting point: link

         

        If you want to rename an AD security Group (Not SharePoint Group) you have to remove and re-add this specific group to get the name reflected in the system (SharePoint use Security Identifier and not the name of the AD Group)

         

        To speedup the overall process I think ShareGate can still help because Online to Online is a supported scenario but the best way is to target a Test AD Security group and see how the mapping get handled by the tool. Last chance is to create a mapping file and automate the remove/re-add using PowerShell

Resources