Re: Migrate Local Group -> AD Group

"Alex" <> wrote in message
news:55e6f356-b480-4b21-ba16-...
> Hi,
> I have a Windows 2000 Server, member of a domain "AD"
> On this server I have created Local Groups, and populated them with AD
> Groups.
> The permissions on the directories and files are created using the
> Local Groups.
>
> We want to change this and stop using local groups. We want to use
> only AD Groups from now on.
>
> Is there a way to change this while keeping all the permissions on the
> files/directories ?
>
> EG:
> Local Group: LG_Test
> Members of LG_Test: AD\Tom, AD\Sam
>
> Files\Diretory: Toto
> Permissions on Toto: LG_Test RWX
>
> I want: Permissions on Toto: AD\Tom rws and AD\Sam RWX
>
> Any ideas how to proceed ?
>
> Thanks
>
> Alex


That is actually the 'best practice' method.

However, you can change it easily. With your example, just create
descriptive Global Groups, one to add Tom in and call it G_Accounting_RWS
and one for Sam and call it G_Accounting_RWX) and add Tom and add them to
the resources and apply permissions.

(I used "Accounting" as an example).

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.

Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer

For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.