Solved

File Server Migration Issue with ADMT

Posted on 2013-11-09
10
1,191 Views
Last Modified: 2013-11-14
Guys one more query please related to file server migration.
On file server we have some shared directories with very confidential data having very specific NTFS permissions and only company auditors have access to those directories.
Though I am running as Domain Administrator, I am not able to open those directories interactively and through UNC shared path unless I take ownership of those folders.
As per our company security policy, changing folder ownership is not allowed
Now we are going to migrate file server with ADMT to new domain.
Will ADMT be able to translate security on above shared folders without taking their ownership and granting full control permissions manually ?
Thanks in advance.
0
Comment
Question by:Mahesh
  • 5
  • 4
10 Comments
 
LVL 16

Expert Comment

by:Shaik M. Sajid
Comment Utility
you can do it the best way with "Robocopy"

see the article

http://sajidshaik.wordpress.com/
0
 
LVL 35

Author Comment

by:Mahesh
Comment Utility
I have gone through above link.
I am not copying data from any source to any destination.
I wanted to just translate security of file server data from source domain to target domain.
I don't think Robocopy is providing this kind of functionality.
Correct me if I am wrong.
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
Comment Utility
0
 
LVL 35

Author Comment

by:Mahesh
Comment Utility
I have checked both articles
I have gone through Robocopy syntax as well.It works only if source and destination is provided.
I neither have any source location nor destination location.
I have all my data on server and only permissions need to be translated from one domain to another domain with ADMT
Any help related to ADMT please
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
Comment Utility
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 35

Author Comment

by:Mahesh
Comment Utility
helge Seracl is not useful as ADMT since ADMT works on SID and Setacl works on usernames or we need to create user mapping file for entire domain having thousands of accounts.
And this still doesnot answer my basic question
Any help related to ADMT please
0
 
LVL 24

Accepted Solution

by:
Sandeshdubey earned 500 total points
Comment Utility
Yes, it will work with ADMT.You need to migrate the file server with ADMT for this it does not require share folder permission ownership should be with admin.

File server migartion is same as migrating a workstation with ADMT.
http://www.experts-exchange.com/Software/Server_Software/File_Servers/Active_Directory/Q_28288363.html#a39636065
0
 
LVL 35

Author Comment

by:Mahesh
Comment Utility
Hi Sandesh,

Thanks for answer.Its perfect
I have checked the same in test Lab as well

Thanks
0
 
LVL 16

Expert Comment

by:Shaik M. Sajid
Comment Utility
it's really fine ...

but in 2003 i did the migration on sigle lable domain i found the issues with ADMT...
i  am able to migrate users perfectly but unable to migrate securities ...

any how it's really nice to hear that the issue is resolved..
and Sandesh is excellent... is guidiance...

thanks to both of you ... for all
0
 
LVL 35

Author Closing Comment

by:Mahesh
Comment Utility
Thanks
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Installing a printer using group policy preferences is not that hard let’s take a look at it. First lets open up your group policy console and edit the policy you want to add it to. I recommend creating a new policy for each printer makes it a l…
[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now