Migrate Directory Permissions

[MillsRJ]

Hello all

I currently have a NT4 server with several thousand directories with local groups applied to them.

I need to migrate this to a new Win2K domain. I have created similarly named groups in new AD, but the permissions are a problem.

Does anyone know how I can dump the permissions, modify the dump with the new domain/groupname, then re-import the permissions.

thanks in advance



Rob Mills
System Analyst
Correctional Services Canada
(all statements are my own and do not reflect on my employer)

 

[Seaspray0]

Thats going to be sticky and difficult.... going through all those shares and setting new permissions, all due to having new SIDs. It would be much easier to keep the SIDs intact. There are a few utilities like movetree (in the 2000 support tools on the CD) that may help do that. If you plan on redoing all the file shares, make sure your users unencrypt thier files before going to a new domain (only the old SID will be able to unencrypt).

 

[GiaBetiu]

Use ADMT (Active Directory Migration Tool) for migartion. Let it migrate the users and groups.
Once you migrate, all accounts will have SID history. There will be the new SID and the old SIDs.
Also in the tool you haev a tool fro replacing the ACEs in teh ACLs from NTFS volumes.

Gia Betiu
gia@almondeyes.net
Computer Eng. CNE 4, CNE 5, MCSE Win2K
new:

http://www.almondeyes.net

(just started)