Click here to get back home

server migration/local Groups

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
server migration/local Groups brandon 08-02-2006
Posted by brandon on August 2, 2006, 3:47 pm
Please log in for more thread options
Alright...I need some help here. We migrated a server to a new
location....basically we went from datacenter a to datacenter b. Datacenter
b happens to be about 1000miles away. The data resides on the SAN, and the
data was migrated to datacenter b with SRDF. We built a new server in
dataceneter b, and the app team re-installed the apps. The problem we have
now, is we all failed to remember the security permissions we had on all the
files. All of these permissions are still in place on the SAN disks, but
the local groups, and SIDS they point to are not on the datacenter b
box....as this box was a fresh install, not a restore of the old.

So...my question, how do I get these local groups to the new box? I found
several ways to actually get the groups and members moved over, but they are
created with new SID's. I either need to get the old SID's to the new box,
or find a way to make the ACL's reflect the new groups.

BTW...this is a large amount of data and a very complex security
layout...redoing it all is not a good option!

thanks for any help!!!



Posted by Roger Abell [MVP] on August 2, 2006, 7:35 pm
Please log in for more thread options
Your quickest free approach may be by profiling the groups on the
source server, obtaining for each the display name and the SID, and
then with this first defining the groups on the new server and then running
a set of massive SubInACL executiions over the copied content to
replace each SID with the new group by name.


> Alright...I need some help here. We migrated a server to a new
> location....basically we went from datacenter a to datacenter b.
> Datacenter b happens to be about 1000miles away. The data resides on the
> SAN, and the data was migrated to datacenter b with SRDF. We built a new
> server in dataceneter b, and the app team re-installed the apps. The
> problem we have now, is we all failed to remember the security permissions
> we had on all the files. All of these permissions are still in place on
> the SAN disks, but the local groups, and SIDS they point to are not on the
> datacenter b box....as this box was a fresh install, not a restore of the
> old.
>
> So...my question, how do I get these local groups to the new box? I found
> several ways to actually get the groups and members moved over, but they
> are created with new SID's. I either need to get the old SID's to the new
> box, or find a way to make the ACL's reflect the new groups.
>
> BTW...this is a large amount of data and a very complex security
> layout...redoing it all is not a good option!
>
> thanks for any help!!!
>



Similar ThreadsPosted
Nesting domain groups under local groups March 18, 2007, 3:56 am
Are there any GROUPs created automatically by installing Cert Server in Win2003? November 14, 2006, 11:34 am
Security Groups ... Where June 8, 2005, 4:01 pm
Restricted Groups July 3, 2006, 6:43 pm
RE: Default Security Groups February 21, 2007, 3:24 am
RE: Default Security Groups March 27, 2007, 7:01 pm
RE: Default Security Groups March 27, 2007, 8:07 pm
RE: Default Security Groups March 27, 2007, 8:51 pm
Users are disappeared from security groups October 19, 2005, 6:44 am
Local Users & Groups Migration April 5, 2006, 9:19 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap