Re: Folder/File Rights before SBS 2003 Migration

From: Jeff Middleton [SBS-MVP] (jeff_at_cfisolutions.com)
Date: 03/16/04


Date: Tue, 16 Mar 2004 08:40:24 -0600

I agree with MCTrainer on this, far easier to make the NT Backup (or your
favorite software) provide the restore with the correct permissions. FYI,
backup programs have the ability to bypass permissions restrictions in order
to backup and restore files unilaterally.

SCOPY is the reskit tool that can accomplish the same things with
Administrator rights, however SCOPY isn't supported on W2K, instead MS put
that functionality into the XCOPY command. Performing an SCOPY or an XCOPY
between non-trusted domains isn't effective.

Unfortunately, if you do use backup and restore to move between non-trusting
domains, you will faithfully recreate the a bunch of account permissions
that don't even exist in that new domain.

If you want to use the NT interface to refresh all of this, you can go to
the properties of the top level folder, change to the Security tab, then go
to advanced. As Administrator, take ownership of that folder, and choose to
reset permissions on all subfolders and files. With that done, then go exit
from the Advanced config back to the Security tab panel. Remove all the
other permissions for specific users, add Administrator as full control,
then reset the permission to all child files and folders. This washes out
the old permissions. From there, you will now be able to use any normal
method to copy/move the files.

"MCTrainer" <anonymous@discussions.microsoft.com> wrote in message
news:e14601c40b34$5584d4b0$a101280a@phx.gbl...
> It is Much better to use the backup utitlity for this
> because it does not require that you have rights to what
> is being backed up. You can backup to disk anywhere on
> the network that you have space, then restore to the new
> computer.
>
> I think I recall that xcopy has a switch for maintaining
> the ACL but with the backup utility restoring security
> settings will be more certain.
>
>
> >-----Original Message-----
> >I am in the process of rolling-out a new SBS 2003 install
> >on a new server. I do have an older server running SBS
> >4.5 and I need to get all of my data off of this older
> >server. Over the years, a great deal of security has
> >been put into place (most that I don't need) on the
> >folders and files. I need to do a manual xcopy on all of
> >these files, but my administrator account may not have
> >rights to everything. How can a clear all of the rights
> >and set them to administrator before the xcopy? I
> >vaguely recall using attrib, but I cannot remember.
> >
> >Thanks.
> >.
> >



Relevant Pages

  • Re: icacls or subinacl
    ... It would be somewhat tricky to restore permissions to such a set of files, ... Another option would be to write a script to create a copy of the ... the backup volume was formatted with NTFS, there would be no need to use ...
    (microsoft.public.windows.server.security)
  • Re: DCOMCNFG.EXE
    ... I have removed all permissions from "Default Configuration ... Restore from last Full Registry Backup? ... SOFTWARE hive file from a known good recent backup, ...
    (microsoft.public.win2000.registry)
  • Re: .bkf file will not restore
    ... unclear when someone asks for a restore fom Thursday work and the logs show ... the backup started on Thursday June 5th and the file on the backup shows ... Currently they are Specila permissions: ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: .bkf file will not restore
    ... Did you rebuild your server and now you need to restore it from your backup? ... Currently they are Specila permissions: ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: copy multiple files in recovery console
    ... >>I made a backup using MS backup and wanted to restore the backup. ... >>But after rebooting, it won't boot anymore. ... Where can I download xcopy? ...
    (microsoft.public.windowsxp.help_and_support)