Lost file permissions after image copy from Recovery CD and FBA

[Guest]

Hello together!

I'd like to build a recovery CD/DVD for our XPE Image. I built my CD with
Target Designer and El Torito Components. With tools like diskpart and format
I created the new partitions.
But then my problems began:
- I want to copy files and folders from CD/DVD to the newly created
partitions (perhaps i will use a zip tool).
- When I start booting from the new system all files and folder permissions
like read only and user permissions are gone. (i created a new local user ->
but in permissions tab there is only a guid replacing the the user name)
- in target designer i added the system cloning component with
cmiResealPhase=0 and other paramers=FALSE

How can I keep files/folder and registry permissions after copy to HD?
Is there any free 3rd Party Image Tool to copy the whole system information?
If heard abaut robocopy and cacls - is this a solution for my problem?

Are there any best practices, how to store (image/zip-file) transfer data
from Recovery CD to HD?

best regards
Tobias

 

[Guest]

Tobias,

You may be able to put together a little vbscript to call cacls.exe to
restablish your permissions or change the ACLs for users/groups on your XPe
system post reimaging.

I too use a recovery CD. The easiest way I have found to do this:

cmiResealPhase=0: This will simply add the cloning component to your build,
but not actually "reseal" until you run fbreseal manually.

After you have established the necessary permissions on your build, you can:

run fbreseal -keepall (which will keep "everything" intact in your build,
including computername!) with the exception of the SID.

if you do not specify the -keepall command, a new computername will be
generated the next time the system boots. I think this is where you may be
running into trouble (especially, if you are assigning permissions to another
partition other than the system partition in your build). There are a lot of
parameters you can pass to fbreseal depending on your needs (i.e. -keepuser
-keepdomain -keepnet -autlogon).

I ran into a similar issue with IIS permissions (specifically the
IUSR_XXXXX) account after performing recovery. In my case, I perform recovery
from a hidden partition of the harddisk. Once the system booted back up my
IUSR_XXXX permissions were "missing" from certain directories on the
non-system partition. I used calcs and a simple vbscript to restablish the
permissions and jammed it into the Run or RunOnce registry key, so every time
the system boots (or one time only), it will make the appropriate ACL
adjustments.

I hope this info helps.

 

[Guest]

Thanks for your helpful reply pjs.
So the acl information that I lost when my data is copied to CD(FS) can be
set by cacl commands on first boot from system partition.
Do you know if it is possible to use Windows "Backup" utility on Recovery-CD
to recover system partition together with acl information?
best regards

 

[Guest]

Tobias,

Yes it can be reset using calcs.

I am not sure if ntbackup will retain the acls on a non-system parition,
espeically if the backup image is set to generate a new computer name.