Migrating groups/permissions using SubinAcl?

[Paul Hutchings]

Looking for a bit of clarification on using Subinacl.

I have a fileserver running Windows 2000 server that was installed
before we upgraded our domain to Windows 2000 that has permissions on
shared files assigned at the NTFS level using machine local groups,
which in turn contain domain global groups.

We're replacing the machine with a Windows 2003 server, and I need to
copy all the files to the new server, and retain the permissions, which
I realise I can't do with machine local groups.

I believe the best thing to do will be to use SubinAcl to replace the
permissions that use machine local groups with the same permissions
using domain local groups, so a folder that has:

MACHINE\Administrators
MACHINE\Group 1
MACHINE\Group 2

permissions would have:

MACHINE\Administrators
DOMAIN\Group 1
DOMAIN\Group 2

permissions on it.

I'd appreciate some advice on the simplest way to achieve this, either
by replacing the existing permissions, or by duplicating them using
domain local groups then removing the old permissions.

We're talking approx 600gb and hundreds of thousands of files so it
needs to be as programatic as possible, i.e start at a top level and
have it recurse.

regard,
Paul

 

[Todd J Heron]

1) DumpSec from www.systemtools.com/somarsoft. DumpSec is free and can be
used to provide a listing all of user permissions for files, directories.
2) Ideal Administration from http://www.pointdev.com. Exportation to csv
files is free and is not time limited.
3) "Secure Copy" from www.smallwonders.com

 

[Guest]

Can you you clarify a bit.....
1. use DumpSec to dump the permissions on the files.....

3. Use SecureCopy to copy the files over....

I'm missing something here....

 

[Daniel]

what is wrong with ROBOCOPY? You could move the files and the perms
together.

 

[Guest]

I need to change the local permissions for example \\server\permission to be
DomainGlobalgroup\permission, otherwise the users will lose their access.