RE: Share Issues

From: Rebecca Chen [MSFT] (v-rebc_at_online.microsoft.com)
Date: 12/01/04


Date: Wed, 01 Dec 2004 05:31:02 GMT

Hi Khimji,

Where are the others shares located, in the old domain or new win2k3
domain? How do you grant the permission to the "other shares", grant the
permission to a group or individual users?

Technically speaking, if you grant a group, which has the user account, the
permission to access the NT resource. After you migrate the user to the new
domain, they are not part of the old group so that they lost the permission
to access the old resource. If you are concerned about this, we can use the
security translation wizard with a SID Mapping file to add the
NewDomain\"Domain Users" groups's SID to the resources. We also say it is
migrate the NT local group.

For more details, please refer to the following link:
How to Migrate Your Microsoft Windows NT 4.0 Directory Services to
Microsoft Active Directory: Demo 3-Security Translation Wizard

http://www.microsoft.com/seminar/shared/asp/view.asp?url=/Seminar/en/2003121
8TNT1-99d3/manifest.xml&rate=0

How to Migrate Your Microsoft Windows NT 4.0 Directory Services to
Microsoft Active Directory
http://www.microsoft.com/seminar/shared/asp/view.asp?url=/Seminar/en/2003121
8TNT1-99/manifest.xml&rate=0

How to use a SID mapping file with the ADMT tool to perform a resource
domain migration to Windows Server 2003
http://support.microsoft.com/?kbid=835991

Any update, let us get in touch!

Best regards,

Rebecca Chen

MCSE2000 MCDBA CCNA

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: Share Issues
>thread-index: AcTW5ZbcToeuNdqWS+COMNpymqi3Zg==
>X-WBNR-Posting-Host: 194.129.15.16
>From: =?Utf-8?B?S2hpbWpp?= <Khimji@discussions.microsoft.com>
>Subject: Share Issues
>Date: Tue, 30 Nov 2004 06:05:04 -0800
>Lines: 17
>Message-ID: <870EBC2F-E28B-40E2-91C9-07E7EAC772B2@microsoft.com>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.migration
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.1.29
>Path: cpmsftngxa10.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: cpmsftngxa10.phx.gbl microsoft.public.windows.server.migration:15647
>X-Tomcat-NG: microsoft.public.windows.server.migration
>
>I have created a trust relation between NT & 2003 domain. I have ran the
>following wizards:
>Group, User, Service Account (in that order).
>
>I logged onto the new domain on a w2k workstation using a user account
that
>I have been using prior to the migration. I was able to log on perfectly
>fine. I am able to access some of my network shares but not others. The
error
>message I get is `Not Accessible. Access Denied'.
>
>Also, for the network shares that I am able to access, I can't map to the
C
>or D drive of that server.
>
>Can anyone please help?
>
>Kind Regards
>
>Khimji
>



Relevant Pages

  • Re: Allowing Anonymous write access only.
    ... need at least READ permission for login. ... > been set up so that anonymous FTP users have write access only, this> may seem insecure and we do get a certain ammount of hackers or> taggers testing the system by dropping test files and folders onto the> server, but because anonymous users do not have read access they soon> find that they cannot download anything they upload and go elsewhere. ... This is where my problems have started,> I initialy replicated all the IIS setting and NTFS permission from my> NT box on my 2003 box but so far have been unable to achive the same> result, it appaers that I can only grant anonymous write access if I ...
    (microsoft.public.inetserver.iis.ftp)
  • Re: Group membership and rights
    ... > access to necessary shares, ... As long as you grant the proper permissions (based on the user's ... groups) there is zero reason to put a user in Domain Admins. ... Maybe you also have a problem with your scripts or even the GPOs ...
    (microsoft.public.win2000.active_directory)
  • Re: Cost Basis for Stock Grant
    ... "I received a stock grant and paid taxes at the ... may have given you a grossed up payment in order to cover the income ... certain number of shares and the company withheld an amount for tax ...
    (misc.taxes)
  • Re: Yukon schemas
    ... ALTER to the schema. ... you have to grant create permission to perform the action ... data and to create and alter stored procedures and views that they owned. ...
    (microsoft.public.sqlserver.security)
  • Re: Local admin right
    ... use Group Policy Restricted Groups to enforce membership of local computer ... > account to local admin group to run some applications. ... > used this permission to grant someone else to access that box too. ...
    (microsoft.public.security)