Hi Chris,

That’s exactly right, when you’re migrating a system from one domain to another, it can be fairly challenging to ensure the security identifiers in the new environment will match up exactly the same.  If you want to migrate to a new domain, to prevent the changing SID values from affecting your Laserfiche system, you should remove any security configurations for AD in the LF Administration Console, as well as any security settings for AD users and groups in the Client.  Once the domain migration occurs, you can add back the AD users and groups.  What could be an easier approach to security is linking LF group/user security to the Domain account/group. I’ve included a link to a discussion about this in Laserfiche Answers. I’ve also attached a white paper that goes over migration considerations for the different components. 

Best,
Wesley Chen