You may find "subinacl" helps. It can search for a SID in the ACL and change it
to a new SID. Also "icacls" (W2003) seems to have a similar capacity.
When I had to do this type of thing I first set up local (or domain local)
groups for the permissions. I then added the existing user accounts to these
groups and changed the permissions to use the groups instead of the users in the
permissions. Then when I set up the new domain based users I could simply add
the new domain users to the correct group and either the old or new account
would have the same permission. I then got the users to start using the new
domain accounts and after it all settled down I removed the old local accounts.
On Fri, 8 Jan 2010 11:48:57 -0200, "Tyler Durden" <abuse@newsgroup> wrote:
>hi meinolf, thank you for the reply. So, no way to import SID, so I'm going
>to setup all of them again. Thanks!
>"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> Hello Tyler,
>> In short, no. You can not migrate and workgroup server and keep all user
>> permissions. With a Domain you have to create user accounts and security
>> groups, etc. even if they use the exact same name they are different from
>> the SID, security identifier.
>> Best regards
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>> I'm in the process of setup a new 2003 DC, with all updates
>>> integrated. This will take place in the same hardware that today is
>>> not a DC. Does exist a method to migrate users and groups, so the
>>> shares permissions wouldn't need to be setup again?
There are 10 types of people, those that understand binary and those that don't.