Evaluate Weigh the pros and cons of technologies, products and projects you are considering.

Is there a tool to move permissions after a domain migration?

I've already completed all of the prerequisites for a smooth transition from an NT4 Domain to a Win2K3 AD Domain, such as User, Group and password migration. Shares are still accessible because SID History was also migrated. I still have the two-way trust in place, so users can still access shares. I know that once the old domain "goes away", users will no longer be able to access shares on resource servers, so I've begun the long, manual tedious process of "Re-ACLing" permissions by adding appropriate Groups and individual users from the new domain. There must be a tool out there that will do this, correct? Any information is greatly appreciated?
SUBINACL.exe works nicely in this respect, if you know the groups you are switching from and the ones that you are switching to.

Additional Expert Help:
Be sure to check our Answer FAQ for more expert advice.
For faster answers, visit ITKnowledge Exchange.

Dig Deeper on Windows administration tools

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.

Start the conversation

Send me notifications when other members comment.

Please create a username to comment.