Migrating from Active Directory 2003 to 2008

[rpvs]

Hi All,
We have cognos8.2 with Active Directory 2003. We are migrating to Active directory 2008 and are able to log in to cognos connection using the new Active Directory 2008 credentials. However none of the folders and reports show up including the public folders.
I would appreciate if anybody who has done this before can share the detailed steps for migrating Cognos 8.2 from active directory 2003 to active directory 2008.

[bdbits]

Was this a migration of the existing Active Directory - no other changes in the domain or users - or did someone set up a new AD just giving you the same login names?

I ask this because from your description, it sounds like Cognos was configured to point to a new active directory rather than a migrated one. Thus, Cognos thinks the users are somebody different than what it currently has in the permission lists. If this is the case, I think you may have no choice but to reset the permissions.

[rpvs]

The active directory 2008 was migrated from Active directory 2003 few years back and most of the applications have been using active directory 2008 for quite a few years. Cognos is the last application on Active directory 2003 and we have been successful in creating a new namespace and pointing to the server which has the new active directory 2008. It even allows us to login using the active directory 2008 credentials but once we do we get an access denied under public folders and no folders exists under personal folder.
I hope this answers your question.

[MFGF]

The active directory 2008 was migrated from Active directory 2003 few years back and most of the applications have been using active directory 2008 for quite a few years. Cognos is the last application on Active directory 2003 and we have been successful in creating a new namespace and pointing to the server which has the new active directory 2008. It even allows us to login using the active directory 2008 credentials but once we do we get an access denied under public folders and no folders exists under personal folder.
I hope this answers your question.

It half-answers the question. If you have a different namespace name, or the users and groups in the new AD are re-created rather than being the same as the original 2003 AD entities, they will have different IDs under the covers, so Cognos will not see them as being the same as the originals. The only way you can make this work is to replace the 2003 namespace with a restored 2008 namespace that is defined with the exact same name and content as the original.

MF.

[rpvs]

Inside Cognos configuration we tried having 2 different namespace original 2003 AD and the new 2008 AD. Since this did not work we updated the original 2003 AD to point to new 2008 AD. This also did not work. The user id and names and email address are same in 2008 as in 2003.
The AD migration was done few years back and utility used for this. How would we go about restoring the access if ID's are different for the two AD's?

[MFGF]

Inside Cognos configuration we tried having 2 different namespace original 2003 AD and the new 2008 AD. Since this did not work we updated the original 2003 AD to point to new 2008 AD. This also did not work. The user id and names and email address are same in 2008 as in 2003.
The AD migration was done few years back and utility used for this. How would we go about restoring the access if ID's are different for the two AD's?

You'd need either to manually redefine all the security rules for the new users and groups, or else you'd need to use a third-party application such as BSP's Security Migration tool:

http://www.bspsoftware.com/products/metamanager/smss/

Cheers!

MF.

[rpvs]

Have been off line for sometime due to vacations and hence delay in responding.Thanks for sending the link to software. I did check into this and seems like the solution to the problem we have.

When I contacted the company BSP software they are quoting $10,000 for a 45 day LEASE of the software.
Though I am able to download the software , am not getting a temporary license from the company due to 'Nature of the software'.

Was wondering if it has been purchased by others and if the quote sounds reasonable. We have limited number of users and find this way too expensive for leasing a software.