Click here to get back home

Moving ACLs to new server
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Moving ACLs to new server Jeff 05-24-2007
Posted by Jeff on May 24, 2007, 12:08 am
Please log in for more thread options
 I have a bunch of data that I need to move from one file server to another.
I want to retain the ACLs but the problem is that we're using local security
groups and when I copy the ACL's along with the files/folders the SIDS are
refering to the old server name. I have thousands of folders and I obviously
can't change them all individually. What is the easiest way to retain the
ACLs during the move but inherit the new server name in the SIDS? BTW, I'm
using Robocopy to copy the data. Thanks!



Posted by Per-Torben Sørensen on May 24, 2007, 6:46 am
Please log in for more thread options
 I was about to suggest backup/restore but I don't know how to do it with
robocopy.

Regards
Per-Torben Sørensen

>I have a bunch of data that I need to move from one file server to another.
>I want to retain the ACLs but the problem is that we're using local
>security groups and when I copy the ACL's along with the files/folders the
>SIDS are refering to the old server name. I have thousands of folders and I
>obviously can't change them all individually. What is the easiest way to
>retain the ACLs during the move but inherit the new server name in the
>SIDS? BTW, I'm using Robocopy to copy the data. Thanks!
>



Posted by Jorge de Almeida Pinto [MVP - on May 24, 2007, 11:33 am
Please log in for more thread options
to move data and retain ACLs --> robocoby
you could "migrate" the SIDs using SIDWALKER

--

Cheers,
(HOPEFULLY THIS INFORMATION HELPS YOU!)

# Jorge de Almeida Pinto # MVP Windows Server - Directory Services

BLOG (WEB-BASED)--> http://blogs.dirteam.com/blogs/jorge/default.aspx
BLOG (RSS-FEEDS)--> http://blogs.dirteam.com/blogs/jorge/rss.aspx
------------------------------------------------------------------------------------------
* How to ask a question --> http://support.microsoft.com/?id=555375
------------------------------------------------------------------------------------------
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always test before implementing!
------------------------------------------------------------------------------------------
#################################################
#################################################
------------------------------------------------------------------------------------------
>I have a bunch of data that I need to move from one file server to another.
>I want to retain the ACLs but the problem is that we're using local
>security groups and when I copy the ACL's along with the files/folders the
>SIDS are refering to the old server name. I have thousands of folders and I
>obviously can't change them all individually. What is the easiest way to
>retain the ACLs during the move but inherit the new server name in the
>SIDS? BTW, I'm using Robocopy to copy the data. Thanks!
>



Posted by Joe Richards [MVP] on May 26, 2007, 9:09 pm
Please log in for more thread options
Copy the DATA with the ACLs intact and then use subinacl to remap them
to the new security principals.

--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net


---O'Reilly Active Directory Third Edition now available---

http://www.joeware.net/win/ad3e.htm


Jeff wrote:
> I have a bunch of data that I need to move from one file server to another.
> I want to retain the ACLs but the problem is that we're using local security
> groups and when I copy the ACL's along with the files/folders the SIDS are
> refering to the old server name. I have thousands of folders and I obviously
> can't change them all individually. What is the easiest way to retain the
> ACLs during the move but inherit the new server name in the SIDS? BTW, I'm
> using Robocopy to copy the data. Thanks!
>
>

Similar ThreadsPosted
Moving Local Users from one Meber Server to another? April 12, 2007, 12:28 pm
Moving server 2003 CA database file location November 6, 2006, 3:35 pm
Domain Controller Certificates and moving to a new server or removing them? April 23, 2007, 2:42 pm
Compare ACLs April 29, 2008, 5:10 pm
Junction Points and ACLs September 20, 2005, 9:02 am
Removing System SID from ACLs August 8, 2006, 2:40 pm
mandatory filesystem ACLs March 9, 2007, 4:14 pm
rmtshare.exe utility overwriting ACLs August 15, 2006, 4:48 pm
ACLs - Users with READ can MOVE a whole folder? April 11, 2007, 10:45 am
FileACL Syntax to Replace File ACLs from Parent January 20, 2006, 11:53 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap