User File Migration - Creator Owner Help

[Arcolite]

I can't seem to find a easy way to achieve what I need.

 

Basically, our existing User Work Share permissions were setup incorrectly many many years ago.

With our Windows 7 migration, we're looking to fix this.

 

Our current shares are...

 

\\domain\legacydata\staffwork

\\domain\legacydata\studentwork

 

Each user has a subfolder with their work or profile inside (e.g - \\domain\legacydata\StaffWork\Bloggs_J)

 

Creator Owner was left off the Permissions when these were created so currently Administrator is the owner for ALL FILES. Also due to the way the permissions are setup, we have to manually create the folders for new starters.

 

We now have setup new shares for Students and Staff which have been configured using Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization).

 

The new Shares are...

 

\\domain\UserData\Staff

\\domain\UserData\Students

 

During logon, the gpo redirects create the needed sub folders. For example...

 

\\domain\UserData\Staff\Bloggs_J\Documents

\\domain\UserData\Staff\Bloggs_J\Favorites

\\domain\UserData\Staff\Bloggs_J\Desktop

 

This is working perfectly and we're very pleased. All the required folders are created for new users during the first logon!

 

 

The problem we have is that I need to be able to migrate the data from the old shares into the new structure programatically without needing the user to log in first.

If I create a folder via script then I'm the Creator Owner so the User doesn't have access.

The same happens if I move files accross.

 

I can manually fix the permissions, but with 1600 users I need to find a automated way.

 

We used NTFSFix in the past and I'm pretty comfortable writing VBScripts when I need to, however this one has me baffled!

 

Any suggestions?

[zag]

Restore from a backup and redirect the files?

[Arcolite]

Restore from a backup and redirect the files?

 

Wouldn't that just copy the incorrect permissions that were on the files when they were backed up?

[zag]

Wouldn't that just copy the incorrect permissions that were on the files when they were backed up?

 

I'm not 100% sure but I thought backupexec had a number of options to append permissions.

[jklight]

I have used subinacl Download: SubInACL (SubInACL.exe) - Microsoft Download Center - Download Details and icacls Icacls to do this in the past. I switched this summer to powershell and with the assistance of How to Handle NTFS Folder Permissions, Security Descriptors and ACLs in PowerShell - Jose Barreto's Blog - Site Home - TechNet Blogs have got managing permissions working in powershell.