Q

Is there a tool to move permissions after a domain migration?

I've already completed all of the prerequisites for a smooth transition from an NT4 Domain to a Win2K3 AD Domain, such as User, Group and password migration. Shares are still accessible because SID History was also migrated. I still have the two-way trust in place, so users can still access shares. I know that once the old domain "goes away", users will no longer be able to access shares on resource servers, so I've begun the long, manual tedious process of "Re-ACLing" permissions by adding appropriate Groups and individual users from the new domain. There must be a tool out there that will do this, correct? Any information is greatly appreciated?
SUBINACL.exe works nicely in this respect, if you know the groups you are switching from and the ones that you are switching to.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

This was first published in January 2005

Dig deeper on Microsoft Active Directory Tools and Troubleshooting

Pro+

Features

Enjoy the benefits of Pro+ membership, learn more and join.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

0 comments

Oldest 

Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:

-ADS BY GOOGLE

SearchServerVirtualization

SearchCloudComputing

SearchExchange

SearchSQLServer

SearchWinIT

SearchEnterpriseDesktop

SearchVirtualDesktop

Close