local group migration!

[Guest]

Alright...I need some help here. We migrated a server to a new
location....basically we went from datacenter a to datacenter b. Datacenter
b happens to be about 1000miles away. The data resides on the SAN, and the
data was migrated to datacenter b with SRDF. We built a new server in
dataceneter b, and the app team re-installed the apps. The problem we have
now, is we all failed to remember the security permissions we had on all the
files. All of these permissions are still in place on the SAN disks, but
the local groups, and SIDS they point to are not on the datacenter b
box....as this box was a fresh install, not a restore of the old.

So...my question, how do I get these local groups to the new box? I found
several ways to actually get the groups and members moved over, but they are
created with new SID's. I either need to get the old SID's to the new box,
or find a way to make the ACL's reflect the new groups.

BTW...this is a large amount of data and a very complex security
layout...redoing it all is not a good option!

thanks for any help!!!

 

[Jerold Schulman]

Alright...I need some help here. We migrated a server to a new
location....basically we went from datacenter a to datacenter b. Datacenter
b happens to be about 1000miles away. The data resides on the SAN, and the
data was migrated to datacenter b with SRDF. We built a new server in
dataceneter b, and the app team re-installed the apps. The problem we have
now, is we all failed to remember the security permissions we had on all the
files. All of these permissions are still in place on the SAN disks, but
the local groups, and SIDS they point to are not on the datacenter b
box....as this box was a fresh install, not a restore of the old.

So...my question, how do I get these local groups to the new box? I found
several ways to actually get the groups and members moved over, but they are
created with new SID's. I either need to get the old SID's to the new box,
or find a way to make the ACL's reflect the new groups.

BTW...this is a large amount of data and a very complex security
layout...redoing it all is not a good option!

thanks for any help!!!

SubInAcl, tip 8530 » Corrected version of SubInAcl.
in the 'Tips & Tricks' at http://www.jsifaq.com
will Replace the security information for one identifier to another.

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com