Answered by:
How to reACL files and folders with new domain usernames and groups using SIDhistory

Question
-
Is there a process, script, tool, etc to reACL folders and files with a users new migrated domain account using SIDhistory? For examply, UserA has a home folder with domainA's username and permissions. UserA was migrated with SIDhistory to domainB and can still access his/her home folder via SIDhistory but I need to replace or add the home folder permissions with UserA's new domainB username.
We cannot use ADMT to translate permissions as the server storing the data is not a Windows server but runs CIFS and handles basic NTFS permissions. I need another process like a script to parse each folder/file and update the permissions of those folders and files with the matching user/group in domainB
What is not explicitly allowed should be implicitly denied
Tuesday, April 30, 2013 4:31 PM
Answers
-
Hi Brian,
Thanks for the post.
Based on my research, please check if this article could help you.
To translate security on member servers by using a scripthttp://technet.microsoft.com/en-us/library/cc974389%28v=ws.10%29.aspx
Hope this helps.
Jeremy Wu
TechNet Community Support- Marked as answer by Jeremy_Wu Tuesday, May 7, 2013 2:24 AM
Friday, May 3, 2013 5:49 AM
All replies
-
Hi Brian,
Thanks for the post.
Based on my research, please check if this article could help you.
To translate security on member servers by using a scripthttp://technet.microsoft.com/en-us/library/cc974389%28v=ws.10%29.aspx
Hope this helps.
Jeremy Wu
TechNet Community Support- Marked as answer by Jeremy_Wu Tuesday, May 7, 2013 2:24 AM
Friday, May 3, 2013 5:49 AM -
-
No, like I said, I can't use ADMT because our file server is CIFS running on NetApp. All CIFS contains is the ACL and SID. I've tried using subinacl with no luck. It runs fine using the changedomain option but nothing changes on the folders or files.
What is not explicitly allowed should be implicitly denied
Tuesday, May 21, 2013 7:49 PM -
Hello,
You can using SetACL.exe. It is free tool and created by Helge Klein a great German MVP guy.
Here is article:
HowTo: ReACLing a File Server in a Domain Migration with SetACL 3.0 (Helge Klein - MVP)
Here is other link:
Wednesday, May 22, 2013 8:02 AM -
His tool only works if the username did not change, in our case, the usernames changed during migration but the SID history remained intact.
What is not explicitly allowed should be implicitly denied
Monday, October 7, 2013 3:36 PM -
His tool only works if the username did not change, in our case, the usernames changed during migration but the SID history remained intact.
What is not explicitly allowed should be implicitly denied
Hello,
This is not correct. Please read link again (Migration – the Flexible Way section). You can use CSV file.
HowTo: ReACLing a File Server in a Domain Migration with SetACL 3.0 (Helge Klein - MVP)
Tuesday, October 8, 2013 9:46 AM