Arcolite Posted August 23, 2012 Posted August 23, 2012 I can't seem to find a easy way to achieve what I need. Basically, our existing User Work Share permissions were setup incorrectly many many years ago. With our Windows 7 migration, we're looking to fix this. Our current shares are... \\domain\legacydata\staffwork \\domain\legacydata\studentwork Each user has a subfolder with their work or profile inside (e.g - \\domain\legacydata\StaffWork\Bloggs_J) Creator Owner was left off the Permissions when these were created so currently Administrator is the owner for ALL FILES. Also due to the way the permissions are setup, we have to manually create the folders for new starters. We now have setup new shares for Students and Staff which have been configured using Best Practice: Roaming Profiles and Folder Redirection (a.k.a. User State Virtualization). The new Shares are... \\domain\UserData\Staff \\domain\UserData\Students During logon, the gpo redirects create the needed sub folders. For example... \\domain\UserData\Staff\Bloggs_J\Documents \\domain\UserData\Staff\Bloggs_J\Favorites \\domain\UserData\Staff\Bloggs_J\Desktop This is working perfectly and we're very pleased. All the required folders are created for new users during the first logon! The problem we have is that I need to be able to migrate the data from the old shares into the new structure programatically without needing the user to log in first. If I create a folder via script then I'm the Creator Owner so the User doesn't have access. The same happens if I move files accross. I can manually fix the permissions, but with 1600 users I need to find a automated way. We used NTFSFix in the past and I'm pretty comfortable writing VBScripts when I need to, however this one has me baffled! Any suggestions?
Arcolite Posted August 23, 2012 Author Posted August 23, 2012 Restore from a backup and redirect the files? Wouldn't that just copy the incorrect permissions that were on the files when they were backed up?
zag Posted August 23, 2012 Posted August 23, 2012 Wouldn't that just copy the incorrect permissions that were on the files when they were backed up? I'm not 100% sure but I thought backupexec had a number of options to append permissions.
jklight Posted September 6, 2012 Posted September 6, 2012 I have used subinacl Download: SubInACL (SubInACL.exe) - Microsoft Download Center - Download Details and icacls Icacls to do this in the past. I switched this summer to powershell and with the assistance of How to Handle NTFS Folder Permissions, Security Descriptors and ACLs in PowerShell - Jose Barreto's Blog - Site Home - TechNet Blogs have got managing permissions working in powershell. 1
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now