Re: finding folders with "write" permission
From: Bob Qin [MSFT] (bobqin_at_online.microsoft.com)
Date: 03/26/04
- Next message: Bob Qin [MSFT]: "Re: DSquery shows Wrong FSMO Role"
- Previous message: Roger Crawford: "More Migration Questions"
- In reply to: Mike Schwarz: "Re: finding folders with "write" permission"
- Next in thread: Bob Qin [MSFT]: "Re: finding folders with "write" permission"
- Messages sorted by: [ date ] [ thread ]
Date: Fri, 26 Mar 2004 14:04:21 GMT
Hi Mike,
If you prefer to copy the NTFS and Share permissions to the new server, you
can also try robocopy.exe and Permcopy.exe tools.
Please refer to the following information.
=======
For NTFS permissions, we can use the Windows 2000 Resource Kit tool
robocopy.exe with the "/SEC" switch to copy the folders with their NTFS
permissions. For share permissions, we can backup and restore them by
saving and restoring the following registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares]
Commonly-Used Steps:
1. Copy all the data from the old file server to target file server.
Note: Please ensure that both the target file server and the source file
server have the same folder scheme (the shares' folder paths on the target
file server are the same as the ones on the source file server). This is
necessary for us to migrate the share information.
If both the source and destination directories reside on NTFS volumes, we
can use Robocopy with the /SEC switch to copy NTFS permissions when copying
files to the same location on the target file server. This will ensure that
both the folder structures and their NTFS permissions are fully copied the
target file server.
Note: To refresh security information for existing destination files and
directories without copying file data, we can use the /SECFIX switch.
/SECFIX copies permissions for newly copied files and refreshes security
information for existing destination files and directories.
2. Copy the share permissions from the source file server
Actually, the share definitions are saved in the following registry key:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares]
Therefore, our steps in this section are:
2.1) Back up the above key on the target file server (for recovery
purposes).
2.2) Back up the key on the source file server in to a reg file.
2.3) Merge the reg file to the target file server.
3. Check if all of the share permissions have been successfully migrated to
the new file server. If not, we can try Permcopy.exe to copy share
permissions (Full Control, Read, and Change) from one existing share to
another.
permcopy \\SourceComputer SourceShare \\TargetComputer TargetShare
Reference:
How to Restore Share Definitions To Another Server
http://support.microsoft.com/?id=141589
Thank you for using our News group.
Regards,
Bob Qin
Product Support Services
Microsoft Corporation
Get Secure! - www.microsoft.com/security
====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
- Next message: Bob Qin [MSFT]: "Re: DSquery shows Wrong FSMO Role"
- Previous message: Roger Crawford: "More Migration Questions"
- In reply to: Mike Schwarz: "Re: finding folders with "write" permission"
- Next in thread: Bob Qin [MSFT]: "Re: finding folders with "write" permission"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|