Page 1 of 1 1
Topic Options
#186589 - 2008-04-01 08:08 AM Script or Utility to Move Users
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
Okay, now that I have your attention...

We are collapsing one of our domains into another. The problem is moving the file shares from one domain to other retaining the permissions but using the new domain credentials.

Example -

In Domain A user JBlow has group membership of Reviewer and Domain Users
JBlow has Read\Execute permissions to DomainA\ServerA\ShareA\DirectoryA.

User JBlow is Recreated on Domain B with group membership of Reviewer and Domain Users.

New file share is DomainB\ServerA\ShareA\DirectoryA

How to Modify the permissions that JBlow has on DirectoryA to now be Domain
B\JBlow instead of DomainA\JBlow.

If there is a Utility that is already capable of this, we are open to the idea of using it. If it is easy enought to script we are even more open to that idea (scripting is free).

Thanks for any input.
_________________________
Today is the tomorrow you worried about yesterday.

Top
#186597 - 2008-04-01 04:08 PM Re: Script or Utility to Move Users [Re: Gargoyle]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Should be able to use CACLS I'd think. We did similar but many, many years ago.

I know Howard Bullock has done this many times I'm sure as they bought up a lot of smaller companies and they had to do it I think.

I'll look and see if I have any details left with my files at work later on.

Top
#186606 - 2008-04-01 07:36 PM Re: Script or Utility to Move Users [Re: NTDOC]
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Sounds like a job for SubInACL.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#186609 - 2008-04-01 07:46 PM Re: Script or Utility to Move Users [Re: Gargoyle]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Not sure if this covers what you're doing or not but take a look at this post and see if it helps.

How Do I move shares-permissions NT4 to 2000

Top
#186613 - 2008-04-01 08:34 PM Re: Script or Utility to Move Users [Re: NTDOC]
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
Thanks Doc, some good reading in there. We also found a 3rd party that might help with the job (looking at pro's and con's of each utility) http://sourceforge.net/projects/setacl/
_________________________
Today is the tomorrow you worried about yesterday.

Top
#186616 - 2008-04-01 09:05 PM Re: Script or Utility to Move Users [Re: Gargoyle]
ChristopheM Offline
Hey THIS is FUN
*****

Registered: 2002-05-13
Posts: 311
Loc: STRASBOURG, France
An other good tool for ntfs permission is fileacl at fileacl web site

take care with the latest version 3.0.1.5. I had problem with UNC share name. you should prefer the 3.0.1.1 version.

with this tool, you can export current permission in a batch file :
 Code:
fileacl <dir> /sub /batchreal /files > "output batch file name"

then you can modify this batch file to replace old server, domain and groupname with the new ones.
finally, apply the modified batch file on the new server.



Edited by NTDOC (2008-04-26 08:20 AM)
Edit Reason: updated the link to FileACL

Top
#186630 - 2008-04-02 03:11 AM Re: Script or Utility to Move Users [Re: ChristopheM]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
Well this was like 5 years ago for me. At the time we tried a few tools and each had issues of one type or another.

If I had to do it again I'd probably retest some tools just to confirm if anything new came out or if how some of them works has changed.

Too bad Howard doesn't come on line and read this - I'm sure he has to have fairly recent experience with it.. a lot newer than my 5 year old experience.

Top
#186631 - 2008-04-02 03:24 AM Re: Script or Utility to Move Users [Re: NTDOC]
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
Howard is a SubInACL fan. We used SubInACL during our AD migration with good results.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#186632 - 2008-04-02 03:48 AM Re: Script or Utility to Move Users [Re: Les]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
May be the best, not sure as I haven't dealt with those type of tools now for years.

Here are some links for it though that may be of value.

Download SubInACL from Microsoft

SubInACL documentation

Solving setup errors by using the SubInACL tool to repair file and registry permissions

Using the Command Line to Edit Multiple Subdirectory Permissions


Top
#186633 - 2008-04-02 04:03 AM Re: Script or Utility to Move Users [Re: NTDOC]
Les Offline
KiX Master
*****

Registered: 2001-06-11
Posts: 12734
Loc: fortfrances.on.ca
We used SubInACL on NT4 domain controllers that we demoted to member servers and joined to AD. We also used it to clean up ACEs on many member servers.
_________________________
Give a man a fish and he will be back for more. Slap him with a fish and he will go away forever.

Top
#186634 - 2008-04-02 06:16 AM Re: Script or Utility to Move Users [Re: Les]
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
SubInACL is on our list of utilities to check out.

Many thanks for the suggestions, now have lots of testing and reading to do. \:\)
_________________________
Today is the tomorrow you worried about yesterday.

Top
#187341 - 2008-04-26 07:08 AM Re: Script or Utility to Move Users [Re: Gargoyle]
NTDOC Administrator Offline
Administrator
*****

Registered: 2000-07-28
Posts: 11634
Loc: Space
The Subinacl Utility Arranges Access Control Entries Incorrectly
Top
#187342 - 2008-04-26 07:50 AM Re: Script or Utility to Move Users [Re: NTDOC]
Gargoyle Offline
MM club member
*****

Registered: 2004-03-09
Posts: 1597
Loc: Valley of the Sun (Arizona, US...
Thanks for the heads up. We are still in the design phase of the plan, and it keeps changing as to what the exact enviroment will look like at the end.

Ever so slowly we are getting there.
_________________________
Today is the tomorrow you worried about yesterday.

Top
#187343 - 2008-04-26 01:35 PM Re: Script or Utility to Move Users [Re: Gargoyle]
ChristopheM Offline
Hey THIS is FUN
*****

Registered: 2002-05-13
Posts: 311
Loc: STRASBOURG, France
Hi,

problem of fileacl 3.0.1.5 are solved with version 3.1.0.6.
_________________________
Christophe

Top
#187346 - 2008-04-26 05:06 PM Re: Script or Utility to Move Users [Re: ChristopheM]
Arend_ Moderator Offline
MM club member
*****

Registered: 2005-01-17
Posts: 1896
Loc: Hilversum, The Netherlands
Sounds like a job for my SharePerms UDF.
Top
Page 1 of 1 1


Moderator:  Arend_, Allen, Jochen, Radimus, Glenn Barnas, ShaneEP, Ruud van Velsen, Mart 
Hop to:
Shout Box

Who's Online
0 registered and 2220 anonymous users online.
Newest Members
Viginette, ManuvdWielNL, Sir_Barrington, batdk82, StuTheCoder
17888 Registered Users

Generated in 0.077 seconds in which 0.034 seconds were spent on a total of 13 queries. Zlib compression enabled.

Search the board with:
superb Board Search
or try with google:
Google
Web kixtart.org