Re: subinacl /migratetodomain

In news:50c6f3e0-f7eb-4e2e-8eb1-,
randall <>, posted the following:
> Hi there
>
> i need a little help with subinacl
>
> stitation:
> a domain migration from NT4 to Active Directory 2003 is in the
> process, the trust is in place and users and groups have been migrated
> to AD successfully
>
> now we have a file server left which is already part of the new domain
> but lists the permissions on files and folders for the old domain.
>
> in the first step ist is neceassary that the old permissions stay in
> place and the new domain groups which have been migrated from the old
> domain need to be added additionally.
>
> luckily the subinacl command has the right option for this
> unfortunately i do not get it to work as supposed.
>
> i use
> subinacl /subdirectories path-to-files\*.* /
> migratetodomain=oldNT=newAD
>
> in the result it shows the number of files/folders but did not modify
> any.
>
> what could be the reason for this?
> any help appriciated
>
> best regards

How did you migrate them? If you used ADMT, you could have selected the
SIDHistory option. This way the old SIDS and the new SIDS are combined on
the new user accuont and they can still access resources on the old domain
without doing a thing.

As for subinacl, take a look at this to see if it helps:

How to use Subinacl.exe to assign permissions to manage services
http://protegeit.blogspot.com/2007/1...to-assign.html

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer


For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.