I've already completed all of the prerequisites for a smooth transition from an NT4 Domain to a Win2K3 AD Domain, such as User, Group and password migration. Shares are still accessible because SID History was also migrated. I still have the two-way trust in place, so users can still access shares. I know that once the old domain "goes away", users will no longer be able to access shares on resource servers, so I've begun the long, manual tedious process of "Re-ACLing" permissions by adding appropriate Groups and individual users from the new domain. There must be a tool out there that will do this, correct? Any information is greatly appreciated?
SUBINACL.exe works nicely in this respect, if you know the groups you are switching from and the ones that you are switching to.
Additional Expert Help: Be sure to check our Answer FAQ for more expert advice. For faster answers, visit ITKnowledge
Dig deeper on Microsoft Active Directory Tools and Troubleshooting
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.