Import Windows Active Directory group SIDs into the MES database

If an existing MES database has the MES Security Mode system parameter set to OS Group and there is connectivity to the Windows Active Directory (AD) domain controller, then the group SIDs are updated automatically during the database migration process. (For information about setting the MES Security Mode system parameter, see the MES Client User Guide or online help.)

However, if the AD domain controller was temporarily not able to be contacted at the time of the upgrade, a message indicating that the server could not be contacted will appear in the Configurator Configuration Messages box. This is because the AD domain controller from which to retrieve the SIDs could not be found. When contact with the AD domain controller is restored, the group SIDs can be retrieved and updated in the MES database using the following procedure.

Import the Windows AD group SIDs into the MES database

1. From the Start menu, open the OS Group SID Importer app.

   

   The OS Group SID Import Utility window appears.

   

2. Click Start.

   The SID import progress appears. During the import process, the Start button becomes a Stop button to allow you to stop the import. The utility will retrieve only the SIDs for any group that does not have a SID in the database. This might happen so quickly that you cannot detect the button label transitioning from Start to Stop and back to Start.

   When the import is complete, the completion status appears in the window.

   

3. Check the status messages to see if any groups have errors. These errors will have to be addressed and the utility run again to correct the errors.

4. Click the window's Close button to close the utility.