Re: finding folders with "write" permission

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 03/26/04


Date: Fri, 26 Mar 2004 14:04:21 GMT

Hi Mike,

If you prefer to copy the NTFS and Share permissions to the new server, you
can also try robocopy.exe and Permcopy.exe tools.

Please refer to the following information.

=======

For NTFS permissions, we can use the Windows 2000 Resource Kit tool
robocopy.exe with the "/SEC" switch to copy the folders with their NTFS
permissions. For share permissions, we can backup and restore them by
saving and restoring the following registry key:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares]
 
Commonly-Used Steps:

1. Copy all the data from the old file server to target file server.

Note: Please ensure that both the target file server and the source file
server have the same folder scheme (the shares' folder paths on the target
file server are the same as the ones on the source file server). This is
necessary for us to migrate the share information.

If both the source and destination directories reside on NTFS volumes, we
can use Robocopy with the /SEC switch to copy NTFS permissions when copying
files to the same location on the target file server. This will ensure that
both the folder structures and their NTFS permissions are fully copied the
target file server.

Note: To refresh security information for existing destination files and
directories without copying file data, we can use the /SECFIX switch.
/SECFIX copies permissions for newly copied files and refreshes security
information for existing destination files and directories.

2. Copy the share permissions from the source file server

Actually, the share definitions are saved in the following registry key:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares]

Therefore, our steps in this section are:

2.1) Back up the above key on the target file server (for recovery
purposes).
2.2) Back up the key on the source file server in to a reg file.
2.3) Merge the reg file to the target file server.

3. Check if all of the share permissions have been successfully migrated to
the new file server. If not, we can try Permcopy.exe to copy share
permissions (Full Control, Read, and Change) from one existing share to
another.

permcopy \\SourceComputer SourceShare \\TargetComputer TargetShare

Reference:

How to Restore Share Definitions To Another Server
http://support.microsoft.com/?id=141589
 
Thank you for using our News group.

Regards,
Bob Qin
Product Support Services
Microsoft Corporation

Get Secure! - www.microsoft.com/security

====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.



Relevant Pages

  • Re: Ownsership and Rights
    ... Full Controll set up for bothe the NTFS and for the share. ... Also, when I am logged into the server as Administrator, and I check the ... Effective Permissions does not work as well. ... That I'm working on has share rights of Everyone, ...
    (microsoft.public.windows.server.sbs)
  • Re: Corporate File control
    ... How often are you finding you need to change permissions? ... do this - I set up the permissions on the folders when I set up the server, ... > minutia of NTFS permissions would be challenging. ... > find good documentation on NTFS settings? ...
    (microsoft.public.win2000.file_system)
  • Re: Corporate File control
    ... How often are you finding you need to change permissions? ... do this - I set up the permissions on the folders when I set up the server, ... > minutia of NTFS permissions would be challenging. ... > find good documentation on NTFS settings? ...
    (microsoft.public.security)
  • Re: appears to loose authentication
    ... me to think that there are security and permissions issues. ... to any shares below is baffling and also suspectable to incorrect NTFS ... an invalid DNS server in the Tcp/Ip settings. ... I checked the share and ntfs permissions on the goldmine share, ...
    (microsoft.public.security)
  • Best way to assign NTFS permission in order to migrate to AD on W2K3
    ... the main file server is a W2K member server and ... most of its permissions are assigned to groups like Domain Users. ... If I use a Global Group then I cannot include other GGs (that is ... to move the files to a different file server in the future. ...
    (microsoft.public.windows.server.migration)