I'm in the process of setup a new 2003 DC, with all updates integrated. This
will take place in the same hardware that today is not a DC. Does exist a
method to migrate users and groups, so the shares permissions wouldn't need
to be setup again?

Thanks.

On Thu, 7 Jan 2010 23:43:09 -0200, "Tyler Durden" <abuse@newsgroup> wrote:

>I'm in the process of setup a new 2003 DC, with all updates integrated. This
>will take place in the same hardware that today is not a DC. Does exist a
>method to migrate users and groups, so the shares permissions wouldn't need
>to be setup again?
>
>Thanks.

When you set up a second DC the users and groups will replicate from the first
DC automatically. If you plan to remove the old DC you will need to make sure
the network is not dependent on this DC with things like DNS, DHCP settings etc.

>

--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.

hi, the first one is not a dc.


"DaveMills" <DaveMills@newsgroup> wrote in message
news:46vdk5tq2k1k92a379s05ppgn5dhh76s5k@newsgroup

> On Thu, 7 Jan 2010 23:43:09 -0200, "Tyler Durden" <abuse@newsgroup>
> wrote:
>

>>I'm in the process of setup a new 2003 DC, with all updates integrated.
>>This
>>will take place in the same hardware that today is not a DC. Does exist a
>>method to migrate users and groups, so the shares permissions wouldn't
>>need
>>to be setup again?
>>
>>Thanks.

>
> When you set up a second DC the users and groups will replicate from the
> first
> DC automatically. If you plan to remove the old DC you will need to make
> sure
> the network is not dependent on this DC with things like DNS, DHCP
> settings etc.

>>

> --
> Dave Mills
> There are 10 types of people, those that understand binary and those that
> don't.

Hello Tyler,

In short, no. You can not migrate and workgroup server and keep all user
permissions. With a Domain you have to create user accounts and security
groups, etc. even if they use the exact same name they are different from
the SID, security identifier.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> I'm in the process of setup a new 2003 DC, with all updates
> integrated. This will take place in the same hardware that today is
> not a DC. Does exist a method to migrate users and groups, so the
> shares permissions wouldn't need to be setup again?
>
> Thanks.
>

hi meinolf, thank you for the reply. So, no way to import SID, so I'm going
to setup all of them again. Thanks!




"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911dbec98cc5e7463d5be83@newsgroup

> Hello Tyler,
>
> In short, no. You can not migrate and workgroup server and keep all user
> permissions. With a Domain you have to create user accounts and security
> groups, etc. even if they use the exact same name they are different from
> the SID, security identifier.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>

>> I'm in the process of setup a new 2003 DC, with all updates
>> integrated. This will take place in the same hardware that today is
>> not a DC. Does exist a method to migrate users and groups, so the
>> shares permissions wouldn't need to be setup again?
>>
>> Thanks.
>>

>
>

Hello Tyler,

Unfortunal you have to start from scratch. In an existing domain this is
all more easy in the future. Keep in mind that it is recommended to have
at least 2 DC/DNS/GC per domain for failover and redundancy reasons. For
backup of a domain controller it is important, that snapshots(Virtula machines),
file copies or images are NOT supported ways for AD backup.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

> hi meinolf, thank you for the reply. So, no way to import SID, so I'm
> going to setup all of them again. Thanks!
>
> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
> news:6cb2911dbec98cc5e7463d5be83@newsgroup
>

>> Hello Tyler,
>>
>> In short, no. You can not migrate and workgroup server and keep all
>> user permissions. With a Domain you have to create user accounts and
>> security groups, etc. even if they use the exact same name they are
>> different from the SID, security identifier.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

>>> I'm in the process of setup a new 2003 DC, with all updates
>>> integrated. This will take place in the same hardware that today is
>>> not a DC. Does exist a method to migrate users and groups, so the
>>> shares permissions wouldn't need to be setup again?
>>>
>>> Thanks.
>>>

Thank you again


"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
news:6cb2911dbf208cc5eb1c1a93783@newsgroup

> Hello Tyler,
>
> Unfortunal you have to start from scratch. In an existing domain this is
> all more easy in the future. Keep in mind that it is recommended to have
> at least 2 DC/DNS/GC per domain for failover and redundancy reasons. For
> backup of a domain controller it is important, that snapshots(Virtula
> machines), file copies or images are NOT supported ways for AD backup.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>

>> hi meinolf, thank you for the reply. So, no way to import SID, so I'm
>> going to setup all of them again. Thanks!
>>
>> "Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>> news:6cb2911dbec98cc5e7463d5be83@newsgroup
>>

>>> Hello Tyler,
>>>
>>> In short, no. You can not migrate and workgroup server and keep all
>>> user permissions. With a Domain you have to create user accounts and
>>> security groups, etc. even if they use the exact same name they are
>>> different from the SID, security identifier.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>> I'm in the process of setup a new 2003 DC, with all updates
>>>> integrated. This will take place in the same hardware that today is
>>>> not a DC. Does exist a method to migrate users and groups, so the
>>>> shares permissions wouldn't need to be setup again?
>>>>
>>>> Thanks.
>>>>

>
>

You may find "subinacl" helps. It can search for a SID in the ACL and change it
to a new SID. Also "icacls" (W2003) seems to have a similar capacity.

When I had to do this type of thing I first set up local (or domain local)
groups for the permissions. I then added the existing user accounts to these
groups and changed the permissions to use the groups instead of the users in the
permissions. Then when I set up the new domain based users I could simply add
the new domain users to the correct group and either the old or new account
would have the same permission. I then got the users to start using the new
domain accounts and after it all settled down I removed the old local accounts.



On Fri, 8 Jan 2010 11:48:57 -0200, "Tyler Durden" <abuse@newsgroup> wrote:

>hi meinolf, thank you for the reply. So, no way to import SID, so I'm going
>to setup all of them again. Thanks!
>
>
>
>
>"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>news:6cb2911dbec98cc5e7463d5be83@newsgroup

>> Hello Tyler,
>>
>> In short, no. You can not migrate and workgroup server and keep all user
>> permissions. With a Domain you have to create user accounts and security
>> groups, etc. even if they use the exact same name they are different from
>> the SID, security identifier.
>>
>> Best regards
>>
>> Meinolf Weber
>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>> confers no rights.
>> ** Please do NOT email, only reply to Newsgroups
>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>

>>> I'm in the process of setup a new 2003 DC, with all updates
>>> integrated. This will take place in the same hardware that today is
>>> not a DC. Does exist a method to migrate users and groups, so the
>>> shares permissions wouldn't need to be setup again?
>>>
>>> Thanks.
>>>

>>
>>

>

--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.

good to know, I'll try that. thanks!


"DaveMills" <DaveMills@newsgroup> wrote in message
news:776gk5pcerp2ns5fr8f993laamk56a58mq@newsgroup

> You may find "subinacl" helps. It can search for a SID in the ACL and
> change it
> to a new SID. Also "icacls" (W2003) seems to have a similar capacity.
>
> When I had to do this type of thing I first set up local (or domain local)
> groups for the permissions. I then added the existing user accounts to
> these
> groups and changed the permissions to use the groups instead of the users
> in the
> permissions. Then when I set up the new domain based users I could simply
> add
> the new domain users to the correct group and either the old or new
> account
> would have the same permission. I then got the users to start using the
> new
> domain accounts and after it all settled down I removed the old local
> accounts.
>
>
>
> On Fri, 8 Jan 2010 11:48:57 -0200, "Tyler Durden" <abuse@newsgroup>
> wrote:
>

>>hi meinolf, thank you for the reply. So, no way to import SID, so I'm
>>going
>>to setup all of them again. Thanks!
>>
>>
>>
>>
>>"Meinolf Weber [MVP-DS]" <meiweb@(nospam)gmx.de> wrote in message
>>news:6cb2911dbec98cc5e7463d5be83@newsgroup

>>> Hello Tyler,
>>>
>>> In short, no. You can not migrate and workgroup server and keep all user
>>> permissions. With a Domain you have to create user accounts and security
>>> groups, etc. even if they use the exact same name they are different
>>> from
>>> the SID, security identifier.
>>>
>>> Best regards
>>>
>>> Meinolf Weber
>>> Disclaimer: This posting is provided "AS IS" with no warranties, and
>>> confers no rights.
>>> ** Please do NOT email, only reply to Newsgroups
>>> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>>>
>>>> I'm in the process of setup a new 2003 DC, with all updates
>>>> integrated. This will take place in the same hardware that today is
>>>> not a DC. Does exist a method to migrate users and groups, so the
>>>> shares permissions wouldn't need to be setup again?
>>>>
>>>> Thanks.
>>>>
>>>
>>>

>>

> --
> Dave Mills
> There are 10 types of people, those that understand binary and those that
> don't.