New Server - Restore and Permission

[Peter]

OK, so I can't seem to come up with a solution for this.

I have a Win2000 server that needs replacement. I have a new box that I can
easily restore all data from the main data share to. The problem is, all
permissions on the current Windows 2000 server are given to local groups.
Like Microsoft says, Global into Local, permissions to local.

Problem. if I restore to the new server, all permission are lost because the
SID of the new local group is not the same as the old. I am left to recreate
the entire matrix of permissions.

Anyone have any ideas? Anyone been here before?

Thanks for any help you can provide.

 

[Danny Sanders]

Add the new server to the domain as a second server in the existing domain.
See:
HOW TO: Promote and Demote Domain Controllers in Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;238369



Transfer the 5 FSMO roles to the new server.

See:

Using Ntdsutil.exe to Seize or Transfer FSMO Roles to a Domain Controller

http://support.microsoft.com/default.aspx?scid=kb;en-us;255504

HOW TO: View and Transfer FSMO Roles in the Graphical User Interface

http://support.microsoft.com/default.aspx?scid=kb;en-us;255690

Flexible Single Master Operation Transfer and Seizure Process

http://support.microsoft.com/default.aspx?scid=kb;en-us;223787





Set the new Global catalog:

How to: Create or Move a Global Catalog in Windows 2000

http://support.microsoft.com/default.aspx?scid=kb;en-us;313994





Set the DNS zone as AD integrated so the DNS zone is replicated to the new
server and make sure the new server's IP address gets handed out to the
clients.







hth

DDS W 2k MVP MCSE