|
Posted by S. Pidgorny on April 30, 2008, 4:49 am
Please log in for more thread options Local users and groups on two different servers by definition cannot be the
same. If preserving that is important, take backups, do system image
migration to new hardware and upgrade in place.
Then make best effort to to stop using local accounts.
--
Svyatoslav Pidgorny, MS MVP - Security, MCSE
-= F1 is the key =-
* http://sl.mvps.org * http://msmvps.com/blogs/sp *
> Robocopy could play a big part in retaining the permissions when a folder
> structure is copied to a new server. But the OP mentioned "users" and
> "groups"; if these are defined in the AD domain, no problem. But if users
> and groups local to the old server need to be moved to the new one, it can
> be messier. I'd be a bit concerned, for example, in trying to copy the sam
> database from one server to another. For one thing, I do not know if the
> two are in compatible formats. For another, the process might break
> permissions to some of the built in security principles.
>
> If local groups and accounts are required, you might have to run a script
> of some kind to create similarly named objects on the new system with
> similar group memberships. When it comes to applying the permissions,
> these will have to be similarly replicated, as the new objects will not be
> identical to the old ones.
>
>
> /Al
>
>> Robocopy (http://en.wikipedia.org/wiki/Robocopy)?
>>
>> --
>> Svyatoslav Pidgorny, MS MVP - Security, MCSE
>> -= F1 is the key =-
>>
>> * http://sl.mvps.org * http://msmvps.com/blogs/sp *
>>
>>> Dear all,
>>>
>>> I have the situation that currently I have windows 2000 file server with
>>> users, groups and some file folders with security applied.
>>> Now I have installed windows 2003 server which will replace the windows
>>> 2000 file server.
>>> What is the most efficient way to move the security of users, groups and
>>> folders permission from windows 2000 to windows 2003?
>>> Otherwise I need to separately creating them in the new file server.
>>>
>>> Thanks,
>>>
>>
>>
>
>
|