McAfee SNS ProTip for Drive Encryption: How to Migrate DE users from one domain to another

Version 1

    Scenarios may arise in your environment where domain migrations are necessary. This can be a challenging process and many factors need to be considered including Drive Encryption and user assignments.


    Migrating Drive Encryption users from one domain to another can be accomplished by deactivating systems, migrating the user and machine accounts in Active Directory and deploying new McAfee Agents from a new ePO server in the target domain. Enabling Add Local Domain Users (ALDU) will ensure the users of the target domain are added to the migrated systems. Further details on possible issues and solutions are available in KB83802 (


    For more resources, visit the McAfee Knowledge Base ( and search for  Drive Encryption related KBs and visit the McAfee Drive Encryption Community at:


    To help you maximize your protection, McAfee SNS ProTips deliver troubleshooting, best practices and how-to tips with links in-depth KnowledgeBase resources. To subscribe to or unsubscribe from ProTips or change your SNS settings, visit the SNS Subscription Center.