Re: Single server enviornment migration to 2003

curt.fenz_at_gmail.com
Date: 10/13/04 

Date: 13 Oct 2004 05:21:13 -0700

HI! This is getting uglier. (I lost connection my old way, now I'm
going through google groups to get to you!)

I tried to use the file server Migration Toolkit. A failed experience!
I copy and pasted the folders. Yes, I knew I'd have permissionless
stuff, but it was easy to copy the three folders.

I shared the folders, giving permission to the same groups who had
them before (Domain Local groups that were associated with Global
groups which contained the users). Wonderful, everyone could see
everything...(At this point I remapped everyone to the new server)
Whoops, everything was R/O (read only) for them. Sigh. So I changed
security settings.

Now each group can see what they are supposed to...
But, I'm still using "home" personal directories ie:
-Home
  \User1
  |User2
  |User3 etc These get mapped in at login.
It used to be that user2 would only see
-Home
  \User2
But now he sees every file in the entire subdirectory. (ie everybody
elses stuff)

Third issue is Monday I caught my receptionist with a new mapping to
the old server! So I removed the mapping (whoops she still had a
spread*** open...lost it) Then I went to the server room and
pondered: How do I keep everyone off of the old stuff? So I went to
security and deny'd "everyone" all seven or so rights. Then I found
out about the lost file, and went to look for it as Administrator:
Nope! I don't have permission to that folder. Don't have permission to
change that folder. Can't figure out a way to replicate any permission
to that folder. I tried to reverse the deny . . but it seems like I've
got 30 folders and a bunch of files scattered around that I can't
access. Granted, the new copies are safe on the new server, it is just
the few files that people managed to place out there on Monday morning
I can't get to.

My system event log is pretty clean of errors: (one computer which I
accidently deleted from my AD)
My application log is highly ugly. My group policy gptmpl.inf won't
copy, tons of scecli 1202 events, cannot find iusr_eehq-f001
(eehq-f001 is my old server) SQLServeragent errors (I haven't done
anything with SQL yet...) and one user who can't map to the new
server,(It tells me to login, and refuses any login I give it) I'm
doing ok....i think. Oh yes, I need to get my clock working....I sure
wish you guys had a good checklist for a single server
migration.....Curt
 
P.S> My apologies if I am starting to sound synical, I went from
everything working perfect on monday to not being able to even get to
you wise advice on Monday. THanks.

>
> I have a couple of questions regarding the two issues:
>
> 1. Have you used File Server Migration Toolkit (FSMT) to migrate file
> server to the new machine or you only use copy command in CMD to copy files
> to the destination sever? If you use copy command to copy the files, the
> permission will be lost; whereas if you use xcopy, the permission will be
> remained.
>
> If you have used FSMT to migrate the files, have you choose to copy
> security settings from the source to the target files and folders?
>
> In addition, what is the meaning of " I also noticed that home users could
> see everyone else stuff"?
>
> Best regards,
>
> Rebecca Chen
>
> MCSE2000 MCDBA CCNA
>
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.