subinacl /migratetodomain

[randall]

Hi there

i need a little help with subinacl

stitation:
a domain migration from NT4 to Active Directory 2003 is in the
process, the trust is in place and users and groups have been migrated
to AD successfully

now we have a file server left which is already part of the new domain
but lists the permissions on files and folders for the old domain.

in the first step ist is neceassary that the old permissions stay in
place and the new domain groups which have been migrated from the old
domain need to be added additionally.

luckily the subinacl command has the right option for this
unfortunately i do not get it to work as supposed.

i use
subinacl /subdirectories path-to-files\*.* /
migratetodomain=oldNT=newAD

in the result it shows the number of files/folders but did not modify
any.

what could be the reason for this?
any help appriciated

best regards

[Ace Fekay [Microsoft Certified Trainer]]

Post by randall
Hi there
i need a little help with subinacl
a domain migration from NT4 to Active Directory 2003 is in the
process, the trust is in place and users and groups have been migrated
to AD successfully
now we have a file server left which is already part of the new domain
but lists the permissions on files and folders for the old domain.
in the first step ist is neceassary that the old permissions stay in
place and the new domain groups which have been migrated from the old
domain need to be added additionally.
luckily the subinacl command has the right option for this
unfortunately i do not get it to work as supposed.
i use
subinacl /subdirectories path-to-files\*.* /
migratetodomain=oldNT=newAD
in the result it shows the number of files/folders but did not modify
any.
what could be the reason for this?
any help appriciated
best regards

How did you migrate them? If you used ADMT, you could have selected the
SIDHistory option. This way the old SIDS and the new SIDS are combined on
the new user accuont and they can still access resources on the old domain
without doing a thing.

As for subinacl, take a look at this to see if it helps:

How to use Subinacl.exe to assign permissions to manage services
http://protegeit.blogspot.com/2007/12/how-to-use-subinaclexe-to-assign.html
--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
***@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.