Re: Migrating security & sharing permissions and local groups

Hi Ankur,

What is the reason here for use of local groups? You can't export local
groups (their security information) and move them to another server.

What you should be using are domain groups which can be used on any domain
joined computer (this way you don't have such problems when replacing
hardware).

You can still move existing shares from one server to another. Here are more
details.

Saving and restoring existing Windows shares
http://support.microsoft.com/?id=125996

--
Mike
Microsoft MVP - Windows Security

"Ankur" <ankur.2005@xxxxxxxxx> wrote in message
news:1153734545.887518.68720@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

I've a file server which needs to be migrated to a different hardware.
There are local groups created on the server which has domain users in
them. These groups are given security and sharing permissions on the
folders. I need to migrate these folders and files along with the
security and sharing permissions to a different server. To try in a
test lab, i setup two computers with Windows 2003 SP1 and installed
resource kit on them. I created the local groups on both the servers
and added the same domain users in both the computers. Then I tried a
sample data transfer using xcopy with /o and robocopy with /copyall
switch, but as the groups are local to the computer, their permissions
are not applied on the destination folders. Only the SID of the group
is visible. Can someone help me with this? Also, can someone suggest
how can I move local groups from one computer to another which are in
the same domain.

Appreciate any help.



.

Relevant Pages

  • RE: file share migration
    ... migrate local groups from one server to another. ... You are right that the File Server Migration Wizard does not support ... MSVR-Migrator Key Benefits ...
    (microsoft.public.windows.server.migration)
  • Re: Global groups and users in security ACLs issue
    ... > resources domains which trusts the master domain. ... there should be only local groups applied on the ... > folders security ACLs. ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: Quick Question - Whats the differance. . .
    ... > Local Groups are assigned access to resources ... > As already mentioned Server local groups can only be used to grant access ... > resources that are local to that Server, and can contain users or groups ... > where server owners/Domain Administrators are one and the same, ...
    (microsoft.public.windows.server.active_directory)
  • Global groups and users in security ACLs issue
    ... resources domains which trusts the master domain. ... our current security by ensuring that in any ... there should be only local groups applied on the ... All global groups and users that are directly in the ACL of folders ...
    (comp.os.ms-windows.nt.admin.security)
  • Re: 2005 Cluster Install Error
    ... You aren't the only one to notice the documentation is less than stellar. ... And you are also correct in that domain-level security groups is the correct ... Microsoft SQL Server MVP ... > solution of creating machine local groups to which I add Domain Global ...
    (microsoft.public.sqlserver.clustering)