Ask the Expert

Is there a tool to move permissions after a domain migration?

I've already completed all of the prerequisites for a smooth transition from an NT4 Domain to a Win2K3 AD Domain, such as User, Group and password migration. Shares are still accessible because SID History was also migrated. I still have the two-way trust in place, so users can still access shares. I know that once the old domain "goes away", users will no longer be able to access shares on resource servers, so I've begun the long, manual tedious process of "Re-ACLing" permissions by adding appropriate Groups and individual users from the new domain. There must be a tool out there that will do this, correct? Any information is greatly appreciated?

    Requires Free Membership to View

SUBINACL.exe works nicely in this respect, if you know the groups you are switching from and the ones that you are switching to.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in January 2005

Join the conversationComment

Share
Comments

    Results

    Contribute to the conversation

    All fields are required. Comments will appear at the bottom of the article.