Re: Moving ACLs to new server

From: "Joe Richards [MVP]" <humorexpress@xxxxxxxxxxx>
Date: Sat, 26 May 2007 21:09:34 -0400

Copy the DATA with the ACLs intact and then use subinacl to remap them to the new security principals.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net

---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm

Jeff wrote:

I have a bunch of data that I need to move from one file server to another. I want to retain the ACLs but the problem is that we're using local security groups and when I copy the ACL's along with the files/folders the SIDS are refering to the old server name. I have thousands of folders and I obviously can't change them all individually. What is the easiest way to retain the ACLs during the move but inherit the new server name in the SIDS? BTW, I'm using Robocopy to copy the data. Thanks!

References:
- Moving ACLs to new server
  - From: Jeff

Prev by Date: Re: Server has been hacked, need to delete hidden user account
Next by Date: Remote desktop: cannot copy files why
Previous by thread: Re: Moving ACLs to new server
Next by thread: Deny Right to Local Admin Group to Log On Via Terminal Services?
Index(es):
- Date
- Thread

Relevant Pages

Re: format of service principal name (SPN)
... Joe Richards Microsoft MVP Windows Server Directory Services ... delegation to the server is not working because the proper user credentials is not being passed. ...
(microsoft.public.windows.server.security)
Re: ASP_WP - driving me mad!!!
... It *is* easy -- your customer seems to have futzed with ACLs on their web ... server to make your life difficult. ... I have ensured that my permissions are set correctly. ...
(microsoft.public.inetserver.iis)
Re: Enabling telnet, ftp, pop3 for root...
... Many users do not have a functional knowledge of ACLs, of those that do, they find them very confusing, because the repercussions of them leaves something else entirely open for analysis. ... If you want to argue Windows 2k/2k3 Server verses Windows NT Server 3.51, you can argue until you're blue in the face about reasons to upgrade to Windows 2000 Server or 2003 Server over NT 3.51, but I know of at least one place that is still running NT 3.51 as a server. ... This is a bit of an exaggeration, as I don't expect someone wanting help with that system will be on Usenet; however, with UNIX systems, the capability to deal with sudo is more common then the capability to deal with ACLs. ... And there could be performance reasons in the choice of a filesystem, depending on the content of the filesystem. ...
(alt.os.linux)
Re: Should IIS svr NOT be in domain
... I would recommend a standalone unless you have multiple machines that> need to work with each other, if that is the case, then you want to set> up a small domain in the DMZ for all of the machines to utilize. ... > Joe Richards Microsoft MVP Windows Server Directory Services ...
(microsoft.public.windows.server.security)
problems with DHCP & Server Baseline Checklist for Windows NT 4.0 Server -
... WinNT 4.0 Server and after doing: ... Apply appropriate registry ACLs ... A number of registry keys need changes to their default ...
(microsoft.public.security)