Help using subinacl please.......

Posted on 2006-05-08
Last Modified: 2008-02-01
We have migrated data from our NT4 domain to a NAS box in a new 2003 AD domain. However the ntfs has not been moved across, when we robocopy with the /sec switch we get "access denied" messages after each file and only the folder structure is copied to the new domain.
Can I use subinacl on the NT4 box or is it just to be run on 2003 server? We only have a NAS box online at the mo in the new domain...

Any help would be appreciated!
Question by:scottyboy777
    LVL 17

    Expert Comment

    Sounds like you have trouble with TRUSTs ?

    By the way, are you sure the NAS-box is actually part of new domain and not a standalone device?

    'Can I use subinacl on the NT4 box or is it just to be run on 2003 server?' yes, with dom1\admin1 and dom2\admin2 users.

    Author Comment

    Yes the nas box is def in the new AD.
    It does seem to be a TRUST issue....
    As NO ntfs/acl's have copied to the new domain, I'm not sure that subinacl can help? It seems people use subinacl when the ntfs have been copied across but the domain entry in the ace is pointing to the old domain.
    Any ideas how to test the trust?

    thanks in advance
    LVL 17

    Accepted Solution

    Verify a Trust
    To verify that the trust relationship is working, follow these steps on the Windows Server 2003-based domain controller: 1. Click Start, point to All Programs, point to Administrative Tools, and then click Active Directory Domains and Trusts.
    2. In the console tree, right-click the domain that contains the trust you want to verify, and then click Properties.
    3. Click the Trusts tab, and then under either Domains trusted by this domain (outgoing trusts) or Domains that trust this domain (incoming trusts), click the trust to be verified, and then click Properties.
    4. Click Validate.  

    Author Comment

    I've validated the trust and all seems ok. Any other idea's as to why ntfs permissions are not being copied to the new domain when I use the /sec switch with robocopy??

    thanks in adv

    Featured Post

    Do You Know the 4 Main Threat Actor Types?

    Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

    Join & Write a Comment

    Overview This article describes how to silently install Adobe Reader on multiple workstations, customize the installation options (accept EULA, remove desktop shortcut etc) using the Adobe Customization Wizard and install Adobe Reader font packs an…
    If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
    After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
    In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor ( If you're interested in additional methods for monitoring bandwidt…

    728 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    25 Experts available now in Live!

    Get 1:1 Help Now