Hi, just coming to the end of an AD domain migration from 2003 domain to 2008 R2. Currently SID filtering is disabled to allow cross-domain sid usage but I'm at the point where I want to turn this off and just wondered if there is a way to monitor what might be using it so make sure all the resources have been updated before switching SID filtering back on.
If not, does anyone know how quickly the SID filtering takes to apply if I need to urgently switch it off again if we find resources/services are not working once we enable it? or to put it another way, if we have problems once SID filtering is enabled, does it instantly start allowing SID usage once we have set it to disabled?