Click here to get back home

file server move from win2000 to win2003

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
file server move from win2000 to win2003 Raymond Chiu 04-24-2008
Posted by Raymond Chiu on April 24, 2008, 9:50 pm
Please log in for more thread options
Dear all,

I have the situation that currently I have windows 2000 file server with
users, groups and some file folders with security applied.
Now I have installed windows 2003 server which will replace the windows 2000
file server.
What is the most efficient way to move the security of users, groups and
folders permission from windows 2000 to windows 2003?
Otherwise I need to separately creating them in the new file server.

Thanks,



Posted by S. Pidgorny on April 26, 2008, 6:41 pm
Please log in for more thread options
Robocopy (http://en.wikipedia.org/wiki/Robocopy)?

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Dear all,
>
> I have the situation that currently I have windows 2000 file server with
> users, groups and some file folders with security applied.
> Now I have installed windows 2003 server which will replace the windows
> 2000 file server.
> What is the most efficient way to move the security of users, groups and
> folders permission from windows 2000 to windows 2003?
> Otherwise I need to separately creating them in the new file server.
>
> Thanks,
>



Posted by Al Dunbar on April 28, 2008, 10:53 pm
Please log in for more thread options
Robocopy could play a big part in retaining the permissions when a folder
structure is copied to a new server. But the OP mentioned "users" and
"groups"; if these are defined in the AD domain, no problem. But if users
and groups local to the old server need to be moved to the new one, it can
be messier. I'd be a bit concerned, for example, in trying to copy the sam
database from one server to another. For one thing, I do not know if the two
are in compatible formats. For another, the process might break permissions
to some of the built in security principles.

If local groups and accounts are required, you might have to run a script of
some kind to create similarly named objects on the new system with similar
group memberships. When it comes to applying the permissions, these will
have to be similarly replicated, as the new objects will not be identical to
the old ones.


/Al

> Robocopy (http://en.wikipedia.org/wiki/Robocopy)?
>
> --
> Svyatoslav Pidgorny, MS MVP - Security, MCSE
> -= F1 is the key =-
>
> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>
>> Dear all,
>>
>> I have the situation that currently I have windows 2000 file server with
>> users, groups and some file folders with security applied.
>> Now I have installed windows 2003 server which will replace the windows
>> 2000 file server.
>> What is the most efficient way to move the security of users, groups and
>> folders permission from windows 2000 to windows 2003?
>> Otherwise I need to separately creating them in the new file server.
>>
>> Thanks,
>>
>
>



Posted by S. Pidgorny on April 30, 2008, 4:49 am
Please log in for more thread options
Local users and groups on two different servers by definition cannot be the
same. If preserving that is important, take backups, do system image
migration to new hardware and upgrade in place.

Then make best effort to to stop using local accounts.

--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-

* http://sl.mvps.org * http://msmvps.com/blogs/sp *

> Robocopy could play a big part in retaining the permissions when a folder
> structure is copied to a new server. But the OP mentioned "users" and
> "groups"; if these are defined in the AD domain, no problem. But if users
> and groups local to the old server need to be moved to the new one, it can
> be messier. I'd be a bit concerned, for example, in trying to copy the sam
> database from one server to another. For one thing, I do not know if the
> two are in compatible formats. For another, the process might break
> permissions to some of the built in security principles.
>
> If local groups and accounts are required, you might have to run a script
> of some kind to create similarly named objects on the new system with
> similar group memberships. When it comes to applying the permissions,
> these will have to be similarly replicated, as the new objects will not be
> identical to the old ones.
>
>
> /Al
>
>> Robocopy (http://en.wikipedia.org/wiki/Robocopy)?
>>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>>> Dear all,
>>>
>>> I have the situation that currently I have windows 2000 file server with
>>> users, groups and some file folders with security applied.
>>> Now I have installed windows 2003 server which will replace the windows
>>> 2000 file server.
>>> What is the most efficient way to move the security of users, groups and
>>> folders permission from windows 2000 to windows 2003?
>>> Otherwise I need to separately creating them in the new file server.
>>>
>>> Thanks,
>>>
>>
>>
>
>



Similar ThreadsPosted
after win2000 upgrade to win2003,event log can not access March 9, 2006, 3:57 am
Bizarre File Security Issue in Win2003 server January 12, 2006, 9:50 am
Re: Move Enterprise CA server December 18, 2007, 8:48 am
How to not allow user move folders accidentially in MS server 2003? January 31, 2008, 4:33 am
Win2003 R2: Permission to file is different from what was granted September 25, 2007, 5:08 am
How do I monitor file access rights on Win2003? May 19, 2006, 2:20 am
Win2003 Server - 10,000 Entries ! February 9, 2006, 11:28 pm
File Access Audit on File Server June 20, 2007, 4:59 pm
IPSec tunnels win2003 server January 4, 2006, 8:01 am
Lockdown on 2nd NIC card on WIN2003 Server March 6, 2006, 3:01 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap