We are in process of doing this same effort. One question. sp_change_users_login appears to be specifically for SQL logins, not for Windows logins. Is there a way to sync a windows user sid (in sys.database_principals) to a new Windows login SID in sys.server_principals?