Create Global Groups from Local Groups on a DC.

[Arctos]

Does anyone know of any software that can parse through local groups on a BDC and create global groups with the same users? I've inherited a domain where users have controlled local groups and used them for file permissions since the BDC was also a file server. Now that I'm supposed to set up a member server as a file server, the domain local groups are no longer available. Rebuilding the groups by hand would be insane, but if it is the only way then I'll have to do it.
I also have to be careful because other sites still use their BDC's as file servers too. If I remove the groups, then their permissions will be lost when the SAM replicates. I have to find something that can also change the group name. ie: copy MyLocalGroup to MyLocalGroup_GBL
Any ideas?

 

[fowlerlfc]

I believe the grpcopy utility which ships with the NT 4.0 resource kit has this ability.

 

[Arctos]

GRPCPY copies users from a local group to a global, but it doesn't parse through global groups that are imbedded in the local group.
ie: local group: Me, Global_users, John, Global_admins
goes to global group: Me, John
It doesn't include users from the 2 groups.

Thanks for the tip though.

 

[ShackDaddy]

From User Manager, select a local group you want to recreate as a global group and then select Select Users from the User drop-down menu. Now, with all of those users selected, create a new global group. All of those same users will automatically be added to the new group you created. Do this group by group, and you will find it easy to create global groups with the same membership as the local groups had.

ShackDaddy

 

[Arctos]

Once again, USRMGR doesn't parse through groups to build a list of all members. Me and John are the only members in the new global group.

Thanks though.

 

[ShackDaddy]

Arctos, I just tried this on one of my own domains and it works just fine. I sat down at a BDC, opened User Manager, and chose 'Select Users' then picked the Backup Operators group which had 9 users. They became selected in the user list. I then chose New Global Group from the User menu, and when the dialog came up to determine membership, all 9 of the selected users were already in the group. I'm not sure why your scenario would be any different.

 

[Arctos]

Just to be difficult, add a global group along with the nine users.
When you select users you'll get your nine, but not the members of the nested global group.
Hold on, I wonder if I can select users from the local group and then select users from the nested global group and get them to add together.
That might be it
Sorry for being a pain.

 

[ShackDaddy]

Well, you never said anything about wanting to nest, or to extract from more than one group at once.... That's not so easy!