Ask the Expert

Is there a tool to move permissions after a domain migration?

I've already completed all of the prerequisites for a smooth transition from an NT4 Domain to a Win2K3 AD Domain, such as User, Group and password migration. Shares are still accessible because SID History was also migrated. I still have the two-way trust in place, so users can still access shares. I know that once the old domain "goes away", users will no longer be able to access shares on resource servers, so I've begun the long, manual tedious process of "Re-ACLing" permissions by adding appropriate Groups and individual users from the new domain. There must be a tool out there that will do this, correct? Any information is greatly appreciated?

Requires Free Membership to View

SUBINACL.exe works nicely in this respect, if you know the groups you are switching from and the ones that you are switching to.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in January 2005

There are Comments. Add yours.

TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
Sort by: OldestNewest

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to: