I have two AD groups which were erroneously created while there should instead have been only one group; they contain the exact same users. However, these groups have been assigned various permissions on variuos resources (like file shares), and I'm unable to track all of them and reset them to only refer to one group.
Can I "merge" the two groups if I delete one of them and put its SID in the SID history of the other one? Will this allow the members of the remaining group to access those resources for which permissions have been granted to the deleted one?
Looks like there is no easy way to add a SID to the SID history of an user or group; at least, both ADUC and ADSIEdit are unable to do this. If the above described trick works, how can this be actually accomplished?