Link to home
Start Free TrialLog in
Avatar of Sal Sorice
Sal SoriceFlag for United States of America

asked on

Copy files to new Domain and REMOVE old NTFS permissions

I am setting up a new SBS 2011 Server/Domain for a client currently running SBS 2003.

This will be a clean install, not a migration.

I want to copy all the files from SBS 2003 to SBS 2011 box but do not want to copy the NTFS permissions - they are very goofy on the SBS 2003 domain (a lot of permissions given to individuals instead of security groups, etc.). The plan is to just set new permissions on the folders using a more logical approach.

It's a pretty simple layout. They have Redirected Folders for their Docs/Desktops (no roaming profiles). They have a few shared folders that all can access and a few that should only be accessed by certain groups (example: the "Owners" group or the "Management" group).

How best to do this?

I want to copy the users redirected folders to their newly created redirected folder on the SBS 2011 domain, with them getting the proper permissions (full control, being set as the owner, etc.).

The other folders should be straight forward (ie, setup the proper secuirty groups, add the proper members to the groups and set the permissions on the folders).

One thought was to just copy the folders to a FAT formatted drive, as it will not retain the permissions. I've read that there are tools you can use to do this within an NTFS structure, but I'd like the opinions of others who've gone down this road before...
ASKER CERTIFIED SOLUTION
Avatar of Levi Gwyn
Levi Gwyn
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Sal Sorice

ASKER

I'm going to try taking some of my client's files and copy them to a VM on my test server to see what happens. I'll advise.

For the GPO permissions, I was referring to this setting:
User generated image
I'ts enabled by default. If you DISABLE it, the Admin will have access to the redirected items. But you have to disable it BEFORE the folders get created.

Thanks for your comments so far!
Hi scion111 - glad you had a good test.  It sounds like you're on top of this.  Let us know how it goes.  It's okay with me if you want to close this.
I tested moving some files and the permissions seem to inherit from the new location properly. Thanks for the help!