Specifies how Active Directory Migration Tool handles migrated user accounts in both the source and target domains. For example, you can direct this tool to disable the migrated accounts in one or both of the domains. The options are defined as follows:
Disable source accounts
Disables the original user account in the source domain. This option prohibits anyone from using the source domain account to log on to the source domain.
Disable target accounts
Disables the new user account in the target domain. This option prohibits anyone from using the target domain account to log on to the target domain. This option can affect migrated service accounts. Do not select this option when migrating accounts that are used as service accounts for Windows NT or Windows 2000 services.
Leave both accounts open
Leaves the existing account in the source domain and the new account in the target domain active. This option allows someone using the source domain account to log on to the source domain and someone using the target domain account to log on to the target domain.
Days until source account expires
Sets the number of days after which the source account will no longer be available. This setting prohibits anyone from using the source account to log on to the domain after the specified number of days.
Migrate user SIDs to target domain
Adds the security ID (SID) of the migrated account in the source domain to the SID History attribute of the new user account in the target domain. This feature uses a secure connection to the source domain controller. For more information about SID History, see Understanding security.