none
How to copy ACLs from one domain to another?

    Question

  • Moving a bunch of data and network stores from one domain/server to another.

    There's no trust relationship between the two domains - this is not a standard migration.

    We will essentially have to resort to copying data from the old domain to store it, move it to the new servers, and paste it in.

    The issue we're trying to avoid is having to manually reconfigure permissions on the new servers because none of the SIDs will properly exist - all of the user names will be different on the new domain as well.

    I am aware of tools like SubInACL that can remap ACLs from one user name to another, but only if it already knows about the new domain.

    Is there any way we can copy our file structures and network shares and paste them into the new domain without losing the ACLs or running into issues of tools not knowing the SIDs from our old domain?

    Any suggestions are greatly appreciated.

    Thursday, July 10, 2014 3:55 PM

Answers

  • how about  ADMT tool to migrate those data?

    check out this link below:

    http://blogs.technet.com/b/activedirectoryua/archive/2010/06/25/active-directory-migration-tool-v3-2-admt-and-migration-guide-released.aspx


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Friday, July 11, 2014 1:45 AM

All replies

  • If you looking to copy the data then ROBOCOPY is one of the best tools that you could find, as long as you use the version that comes with windows 2008 or above, as it has multi treading and some other security fix feature in it.  

    http://www.adminnation.com/2011/06/27/let-robocopy-save-you-time/

    but i doubt you will be able to get the sids for accounts it has no idea about on the other domain. 

    Thursday, July 10, 2014 11:58 PM
  • how about  ADMT tool to migrate those data?

    check out this link below:

    http://blogs.technet.com/b/activedirectoryua/archive/2010/06/25/active-directory-migration-tool-v3-2-admt-and-migration-guide-released.aspx


    Every second counts..make use of it. Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
    IT Stuff Quick Bytes

    Friday, July 11, 2014 1:45 AM