Re: Export NTFS Permissions on parent folder and sub folders

From: Herb Martin (news_at_LearnQuick.com)
Date: 11/05/04 

Date: Fri, 5 Nov 2004 15:22:49 -0600

"Rajesh Sunder" <raj_s@postmark.net> wrote in message
news:d70ab2ed.0411051217.38746b63@posting.google.com...
> Hi
>
> I'm planning to migrate two Windows NT Domain to a single Windows 2003
> Domain.

You might consider upgrading (at least one of) them.

Then permissions will (at least partially) take care of themselves.

> The File Servers will be migrated to the new domain after all the
> users are migrated.
>
> The various folder and sub folders on the existing file servers have
> NTFS security permissions given as Old Domainname\Domain Users Built
> In Groups.

That Group "Domain Users" may be a well-known SID and
thus the same in all domains (but I am not sure about that.)

> Since ADMT does not migrate the Built in groups and its membership i
> have to manually assign the permission on the various folders and sub
> folders .
>
> Using dumpsec(formely dumpacl) i can export the NTFS security
> permission on the shared folder permissions one server at a time.
>
> I have tried Shareenum but it can export only the share permissions
> not the ACL's.
>
> Is there any tool or utility which can export the NTFS folder
> permissions for all the servers in the entire domain.

These tools all work one server at a time (as far as I know) and
were there one that did "all" it would really be doing each one
sequentially.

Consider these tools:

xcopy /o (advantage: it's built-in)

setacl (advantage: it's free, disadvantage: very complex command line)
    --find it at setacl.sourceforge.net)
subinacl (free, somewhat difficult syntax, resource kit tool, NT or online) 

-- 
Herb Martin
>
> Thanks in Anticipation

Relevant Pages

  • Re: Shared folders not visible from one PC on network
    ... >We have an NT Domain with NT and W2k Servers and XP clients. ... >setting the permissions is to allow the required NT groups Full Contol ... >Share level permissions to a shared folder. ... Can other servers be seen / accessed from the problem computer, ...
    (microsoft.public.windowsxp.network_web)
  • Re: User unable to open Word Document on Network
    ... NTFS permissions to be reapplied to the folder. ... We have a mix of Win2k servers and Win NT4 servers. ... >>> to a network folder where MS Word files reside. ...
    (microsoft.public.win2000.security)
  • Re: Finding Restrictive SubFolder Permissions when migrating NT4 data
    ... > We are migrating lots of shared data ... > Legacy NT4 servers to an existing W2K Domain. ... > migrate the Managers folder somewhere else... ... Migrate the existing permissions using something ...
    (microsoft.public.windows.server.migration)
  • Export NTFS Permissions on parent folder and sub folders
    ... I'm planning to migrate two Windows NT Domain to a single Windows 2003 ... The various folder and sub folders on the existing file servers have ... NTFS security permissions given as Old Domainname\Domain Users Built ...
    (microsoft.public.windows.server.migration)
  • Re: File access rights in Windows Server 2003
    ... > When I am moving files among servers, I usually create a backup files with ... > process will also restore a file and folder permissions. ...
    (microsoft.public.windows.server.security)
Loading