| Author | Messages | |
bwatson
Posts:0
 | | 05/30/2007 5:38 AM |
| Not Active Directory related, but thought I would ping the
list for ideas.
We used to have a single Network Appliance Filer, which
contained virtually all our data. Our needs have grown and we have
purchased a new NetApp filer and need to move the home folders for all the
users to a share on the new NetApp filer.
I have the permissions set properly for the folder that will
contain the home folders (basic permissions, Domain Admins with Full Control
and an additional security group called FilerAdmins with Full Control), however
I need to set the security permissions on each individual home folder so the
user who owns the folder has full modify rights. So for the bwatson
folder for instance, it should have Domain Admins full control, FilerAdmins full
control, and myself with read/write privileges. And so on and so forth
for each user.
Any thoughts on how best to accomplish this and add each
individual user to their respective folder with modify rights?
Thanks for any input.
~Ben | | | |
| CrawfordS
Posts:128
| | 05/30/2007 6:23 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
I can’t necessarily tell you the best
way, but I can tell you what I do J. I’m assuming the folders are names reflect the
username, so in your example, your username is bwatson. I use a tool
called FileACL (http://www.gbordier.com/gbtools/fileacl.htm).
I’m sure something similar could be done with Subinacl, SetACL, but this
is what I had at the time, and it’s worked well and speedily.
----perm.bat-----
fileacl %1 /INHERIT /SUB /FORCE /FILES
/REPLACE
fileacl %1 /s "DOMAIN\%1":f /d
"DOMAIN\%1":PDO/U/U
fileacl %1 /O "DOMAIN\%1" /SUB
/FILES
fileacl %1 /O Administrators
----end-------
Then, from the root, run:
For /D %i in (*.*) do perm %i
The first line basically clears any perms
that exist and sets the whole sub-tree to inherit the perms defined on the
root. In your case DA and FA at full control.
Line 2 sets 2 ACLs. The first is an allow for the user to have full
control of the folder. The second is a Deny so they can’t delete
the folder, change the permissions, or take ownership of their folder.
Line 3 sets them as the owner of all
files/folders
Line 4 sets the owner of their root folder
back to administrators. This locks the deny permission in line 2 since,
if they were the owner, they could remove the Deny.
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of WATSON, BEN
Sent: Wednesday, May 30, 2007 4:38
PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] [OT] Home
Folder Data Migrations
Not
Active Directory related, but thought I would ping the list for ideas.
We
used to have a single Network Appliance Filer, which contained virtually all
our data. Our needs have grown and we have purchased a new NetApp filer
and need to move the home folders for all the users to a share on the new
NetApp filer.
I
have the permissions set properly for the folder that will contain the home
folders (basic permissions, Domain Admins with Full Control and an additional
security group called FilerAdmins with Full Control), however I need to set the
security permissions on each individual home folder so the user who owns the
folder has full modify rights. So for the bwatson folder for instance, it
should have Domain Admins full control, FilerAdmins full control, and myself
with read/write privileges. And so on and so forth for each user.
Any
thoughts on how best to accomplish this and add each individual user to their
respective folder with modify rights?
Thanks
for any input.
~Ben | | | |
| bwatson
Posts:0
| | 05/31/2007 10:16 AM |
| v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
Ah, excellent Scott.
Providing examples gives me the
greatest assistance. I’ll go over your syntax and pick up exactly
how and why this works and take it from there.
This will be tremendously
helpful.
Thanks!
~Ben
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On
Behalf Of Crawford, Scott
Sent: Wednesday, May 30, 2007 3:23 PM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] [OT] Home Folder Data Migrations
I can’t necessarily tell you the best way, but I can tell you
what I do J. I’m assuming the folders are names reflect the
username, so in your example, your username is bwatson. I use a tool
called FileACL (http://www.gbordier.com/gbtools/fileacl.htm).
I’m sure something similar could be done with Subinacl, SetACL, but this
is what I had at the time, and it’s worked well and speedily.
----perm.bat-----
fileacl %1 /INHERIT /SUB /FORCE /FILES /REPLACE
fileacl %1 /s "DOMAIN\%1":f /d
"DOMAIN\%1":PDO/U/U
fileacl %1 /O "DOMAIN\%1" /SUB /FILES
fileacl %1 /O Administrators
----end-------
Then, from the root, run:
For /D %i in (*.*) do perm %i
The first line basically clears any perms that exist and sets the
whole sub-tree to inherit the perms defined on the root. In your case DA
and FA at full control.
Line 2 sets 2 ACLs. The first is an allow for the user to have full
control of the folder. The second is a Deny so they can’t delete
the folder, change the permissions, or take ownership of their folder.
Line 3 sets them as the owner of all files/folders
Line 4 sets the owner of their root folder back to
administrators. This locks the deny permission in line 2 since, if they
were the owner, they could remove the Deny.
From:
ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On
Behalf Of WATSON, BEN
Sent: Wednesday, May 30, 2007 4:38 PM
To: ActiveDir@mail.activedir.org
Subject: [ActiveDir] [OT] Home Folder Data Migrations
Not Active Directory related, but thought I would ping the
list for ideas.
We used to have a single Network Appliance Filer, which
contained virtually all our data. Our needs have grown and we have purchased
a new NetApp filer and need to move the home folders for all the users to a
share on the new NetApp filer.
I have the permissions set properly for the folder that will
contain the home folders (basic permissions, Domain Admins with Full Control and
an additional security group called FilerAdmins with Full Control), however I
need to set the security permissions on each individual home folder so the user
who owns the folder has full modify rights. So for the bwatson folder for
instance, it should have Domain Admins full control, FilerAdmins full control,
and myself with read/write privileges. And so on and so forth for each
user.
Any thoughts on how best to accomplish this and add each
individual user to their respective folder with modify rights?
Thanks for any input.
~Ben | | | |
| matheesha
Posts:34
| | 05/31/2007 11:13 AM |
| Personally I am interested in how you'd migrate the data. Are you
going to backup and restore? If so I assume you'll skip restoring the
permissions? Then ACL it later? The tricky bit is getting to data at
the source which you dont have permissions to (e.g. redirected folders
which have exclusive perms to owner only). Therefore backup/restore
files right is crucial.
Just my .02 cents
HTH
M@
On 31/05/07, WATSON, BEN wrote:
>
>
>
> Ah, excellent Scott.
>
>
>
> Providing examples gives me the greatest assistance. I'll go over your
> syntax and pick up exactly how and why this works and take it from there.
>
>
>
> This will be tremendously helpful.
>
>
>
> Thanks!
>
> ~Ben
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Crawford, Scott
> Sent: Wednesday, May 30, 2007 3:23 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] [OT] Home Folder Data Migrations
>
>
>
>
> I can't necessarily tell you the best way, but I can tell you what I do J.
> I'm assuming the folders are names reflect the username, so in your example,
> your username is bwatson. I use a tool called FileACL
> (http://www.gbordier.com/gbtools/fileacl.htm). I'm sure
> something similar could be done with Subinacl, SetACL, but this is what I
> had at the time, and it's worked well and speedily.
>
>
>
> ----perm.bat-----
>
> fileacl %1 /INHERIT /SUB /FORCE /FILES /REPLACE
>
> fileacl %1 /s "DOMAIN\%1":f /d "DOMAIN\%1":PDO/U/U
>
> fileacl %1 /O "DOMAIN\%1" /SUB /FILES
>
> fileacl %1 /O Administrators
>
> ----end-------
>
>
>
> Then, from the root, run:
>
> For /D %i in (*.*) do perm %i
>
>
>
> The first line basically clears any perms that exist and sets the whole
> sub-tree to inherit the perms defined on the root. In your case DA and FA
> at full control.
>
>
> Line 2 sets 2 ACLs. The first is an allow for the user to have full control
> of the folder. The second is a Deny so they can't delete the folder, change
> the permissions, or take ownership of their folder.
>
>
>
> Line 3 sets them as the owner of all files/folders
>
>
>
> Line 4 sets the owner of their root folder back to administrators. This
> locks the deny permission in line 2 since, if they were the owner, they
> could remove the Deny.
>
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> WATSON, BEN
> Sent: Wednesday, May 30, 2007 4:38 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] [OT] Home Folder Data Migrations
>
>
>
> Not Active Directory related, but thought I would ping the list for ideas.
>
>
>
> We used to have a single Network Appliance Filer, which contained virtually
> all our data. Our needs have grown and we have purchased a new NetApp filer
> and need to move the home folders for all the users to a share on the new
> NetApp filer.
>
>
>
> I have the permissions set properly for the folder that will contain the
> home folders (basic permissions, Domain Admins with Full Control and an
> additional security group called FilerAdmins with Full Control), however I
> need to set the security permissions on each individual home folder so the
> user who owns the folder has full modify rights. So for the bwatson folder
> for instance, it should have Domain Admins full control, FilerAdmins full
> control, and myself with read/write privileges. And so on and so forth for
> each user.
>
>
>
> Any thoughts on how best to accomplish this and add each individual user to
> their respective folder with modify rights?
>
>
>
> Thanks for any input.
>
>
>
> ~Ben
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx | | | |
| bdesmond
Posts:977
| | 06/01/2007 1:12 AM |
| Replying to this thread as a whole.
First, I would tell NetApp to help you with this as part of the purchase. My experience with storage vendors is that they will help you migrate frames if you're buying a new one.
You may very well be better served by some hardware level copy/replication mechanism and it will certainly be faster. If not personally I'd just go get something like veritas volume replicator and make it work for me. Doing massive robocopy type stuff is error prone and slow as can be.
IIRC a netapp filer can be NAS, iscsi or FC connected (e.g. pseudo local disk on a wintel box).
Thanks,
Brian Desmond
brian@briandesmond.com
c - 312.731.3132
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
> owner@mail.activedir.org] On Behalf Of Freddy HARTONO
> Sent: Thursday, May 31, 2007 11:36 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] [OT] Home Folder Data Migrations
> Importance: Low
>
> Hi Guys
>
> Not sure whats the relevance of this in terms of netapp - but if the
> netapp is just considered as localdisks on a windows filer head instead
> of NAS type storage.. you could use File Server Migration Tool (FSMT)
> from msft - to migrate file shares/ntfs acls etc.
>
> That should shave off some time and also takes care of those
> problematic long filenames during the migration...
>
>
> Thank you and have a splendid day!
>
> Kind Regards,
>
> Freddy Hartono
> Group Infrastructure Services Lead
> International SOS Pte Ltd
> mail/sip: freddy.hartono@internationalsos.com
> phone: (+65) 6330-9785
>
>
>
> -----Original Message-----
> From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-
> owner@mail.activedir.org] On Behalf Of Matheesha Weerasinghe
> Sent: Thursday, May 31, 2007 11:14 PM
> To: ActiveDir@mail.activedir.org
> Subject: Re: [ActiveDir] [OT] Home Folder Data Migrations
>
> Personally I am interested in how you'd migrate the data. Are you
> going to backup and restore? If so I assume you'll skip restoring the
> permissions? Then ACL it later? The tricky bit is getting to data at
> the source which you dont have permissions to (e.g. redirected folders
> which have exclusive perms to owner only). Therefore backup/restore
> files right is crucial.
>
> Just my .02 cents
>
> HTH
>
> M@
>
> On 31/05/07, WATSON, BEN wrote:
> >
> >
> >
> > Ah, excellent Scott.
> >
> >
> >
> > Providing examples gives me the greatest assistance. I'll go over
> your
> > syntax and pick up exactly how and why this works and take it from
> there.
> >
> >
> >
> > This will be tremendously helpful.
> >
> >
> >
> > Thanks!
> >
> > ~Ben
> >
> >
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> > Crawford, Scott
> > Sent: Wednesday, May 30, 2007 3:23 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: RE: [ActiveDir] [OT] Home Folder Data Migrations
> >
> >
> >
> >
> > I can't necessarily tell you the best way, but I can tell you what I
> do J.
> > I'm assuming the folders are names reflect the username, so in your
> example,
> > your username is bwatson. I use a tool called FileACL
> > (http://www.gbordier.com/gbtools/fileacl.htm). I'm sure
> > something similar could be done with Subinacl, SetACL, but this is
> what I
> > had at the time, and it's worked well and speedily.
> >
> >
> >
> > ----perm.bat-----
> >
> > fileacl %1 /INHERIT /SUB /FORCE /FILES /REPLACE
> >
> > fileacl %1 /s "DOMAIN\%1":f /d "DOMAIN\%1":PDO/U/U
> >
> > fileacl %1 /O "DOMAIN\%1" /SUB /FILES
> >
> > fileacl %1 /O Administrators
> >
> > ----end-------
> >
> >
> >
> > Then, from the root, run:
> >
> > For /D %i in (*.*) do perm %i
> >
> >
> >
> > The first line basically clears any perms that exist and sets the
> whole
> > sub-tree to inherit the perms defined on the root. In your case DA
> and FA
> > at full control.
> >
> >
> > Line 2 sets 2 ACLs. The first is an allow for the user to have full
> control
> > of the folder. The second is a Deny so they can't delete the folder,
> change
> > the permissions, or take ownership of their folder.
> >
> >
> >
> > Line 3 sets them as the owner of all files/folders
> >
> >
> >
> > Line 4 sets the owner of their root folder back to administrators.
> This
> > locks the deny permission in line 2 since, if they were the owner,
> they
> > could remove the Deny.
> >
> >
> > ________________________________
> >
> >
> > From: ActiveDir-owner@mail.activedir.org
> > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> > WATSON, BEN
> > Sent: Wednesday, May 30, 2007 4:38 PM
> > To: ActiveDir@mail.activedir.org
> > Subject: [ActiveDir] [OT] Home Folder Data Migrations
> >
> >
> >
> > Not Active Directory related, but thought I would ping the list for
> ideas.
> >
> >
> >
> > We used to have a single Network Appliance Filer, which contained
> virtually
> > all our data. Our needs have grown and we have purchased a new
> NetApp filer
> > and need to move the home folders for all the users to a share on the
> new
> > NetApp filer.
> >
> >
> >
> > I have the permissions set properly for the folder that will contain
> the
> > home folders (basic permissions, Domain Admins with Full Control and
> an
> > additional security group called FilerAdmins with Full Control),
> however I
> > need to set the security permissions on each individual home folder
> so the
> > user who owns the folder has full modify rights. So for the bwatson
> folder
> > for instance, it should have Domain Admins full control, FilerAdmins
> full
> > control, and myself with read/write privileges. And so on and so
> forth for
> > each user.
> >
> >
> >
> > Any thoughts on how best to accomplish this and add each individual
> user to
> > their respective folder with modify rights?
> >
> >
> >
> > Thanks for any input.
> >
> >
> >
> > ~Ben
> List info : http://www.activedir.org/List.aspx
> List FAQ : http://www.activedir.org/ListFAQ.aspx
> List archive: http://www.activedir.org/ma/default.aspx
> .+-�w��i��0��-�����+���֬���@Bm������+�v*�ˊ�E���֫r�zm������+�v*��k�^}����)
.+- 0jq.+- 0ˊEKj!ibbןjm | | | |
| MarcusOh
Posts:14
| | 06/01/2007 8:27 AM |
| If you're migrating data, good ol' robocopy will copy the permissions as well as the file.
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Matheesha Weerasinghe
Sent: Thursday, May 31, 2007 11:14 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] [OT] Home Folder Data Migrations
Personally I am interested in how you'd migrate the data. Are you
going to backup and restore? If so I assume you'll skip restoring the
permissions? Then ACL it later? The tricky bit is getting to data at
the source which you dont have permissions to (e.g. redirected folders
which have exclusive perms to owner only). Therefore backup/restore
files right is crucial.
Just my .02 cents
HTH
M@
On 31/05/07, WATSON, BEN wrote:
>
>
>
> Ah, excellent Scott.
>
>
>
> Providing examples gives me the greatest assistance. I'll go over your
> syntax and pick up exactly how and why this works and take it from there.
>
>
>
> This will be tremendously helpful.
>
>
>
> Thanks!
>
> ~Ben
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Crawford, Scott
> Sent: Wednesday, May 30, 2007 3:23 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] [OT] Home Folder Data Migrations
>
>
>
>
> I can't necessarily tell you the best way, but I can tell you what I do J.
> I'm assuming the folders are names reflect the username, so in your example,
> your username is bwatson. I use a tool called FileACL
> (http://www.gbordier.com/gbtools/fileacl.htm). I'm sure
> something similar could be done with Subinacl, SetACL, but this is what I
> had at the time, and it's worked well and speedily.
>
>
>
> ----perm.bat-----
>
> fileacl %1 /INHERIT /SUB /FORCE /FILES /REPLACE
>
> fileacl %1 /s "DOMAIN\%1":f /d "DOMAIN\%1":PDO/U/U
>
> fileacl %1 /O "DOMAIN\%1" /SUB /FILES
>
> fileacl %1 /O Administrators
>
> ----end-------
>
>
>
> Then, from the root, run:
>
> For /D %i in (*.*) do perm %i
>
>
>
> The first line basically clears any perms that exist and sets the whole
> sub-tree to inherit the perms defined on the root. In your case DA and FA
> at full control.
>
>
> Line 2 sets 2 ACLs. The first is an allow for the user to have full control
> of the folder. The second is a Deny so they can't delete the folder, change
> the permissions, or take ownership of their folder.
>
>
>
> Line 3 sets them as the owner of all files/folders
>
>
>
> Line 4 sets the owner of their root folder back to administrators. This
> locks the deny permission in line 2 since, if they were the owner, they
> could remove the Deny.
>
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> WATSON, BEN
> Sent: Wednesday, May 30, 2007 4:38 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] [OT] Home Folder Data Migrations
>
>
>
> Not Active Directory related, but thought I would ping the list for ideas.
>
>
>
> We used to have a single Network Appliance Filer, which contained virtually
> all our data. Our needs have grown and we have purchased a new NetApp filer
> and need to move the home folders for all the users to a share on the new
> NetApp filer.
>
>
>
> I have the permissions set properly for the folder that will contain the
> home folders (basic permissions, Domain Admins with Full Control and an
> additional security group called FilerAdmins with Full Control), however I
> need to set the security permissions on each individual home folder so the
> user who owns the folder has full modify rights. So for the bwatson folder
> for instance, it should have Domain Admins full control, FilerAdmins full
> control, and myself with read/write privileges. And so on and so forth for
> each user.
>
>
>
> Any thoughts on how best to accomplish this and add each individual user to
> their respective folder with modify rights?
>
>
>
> Thanks for any input.
>
>
>
> ~Ben
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
.+- 0jq.+- 0ˊEKj!ibbןjm | | | |
| FreddyHARTONO
Posts:19
| | 06/01/2007 12:35 PM |
| Hi Guys
Not sure whats the relevance of this in terms of netapp - but if the netapp is just considered as localdisks on a windows filer head instead of NAS type storage.. you could use File Server Migration Tool (FSMT) from msft - to migrate file shares/ntfs acls etc.
That should shave off some time and also takes care of those problematic long filenames during the migration...
Thank you and have a splendid day!
Kind Regards,
Freddy Hartono
Group Infrastructure Services Lead
International SOS Pte Ltd
mail/sip: freddy.hartono@internationalsos.com
phone: (+65) 6330-9785
-----Original Message-----
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Matheesha Weerasinghe
Sent: Thursday, May 31, 2007 11:14 PM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] [OT] Home Folder Data Migrations
Personally I am interested in how you'd migrate the data. Are you
going to backup and restore? If so I assume you'll skip restoring the
permissions? Then ACL it later? The tricky bit is getting to data at
the source which you dont have permissions to (e.g. redirected folders
which have exclusive perms to owner only). Therefore backup/restore
files right is crucial.
Just my .02 cents
HTH
M@
On 31/05/07, WATSON, BEN wrote:
>
>
>
> Ah, excellent Scott.
>
>
>
> Providing examples gives me the greatest assistance. I'll go over your
> syntax and pick up exactly how and why this works and take it from there.
>
>
>
> This will be tremendously helpful.
>
>
>
> Thanks!
>
> ~Ben
>
>
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> Crawford, Scott
> Sent: Wednesday, May 30, 2007 3:23 PM
> To: ActiveDir@mail.activedir.org
> Subject: RE: [ActiveDir] [OT] Home Folder Data Migrations
>
>
>
>
> I can't necessarily tell you the best way, but I can tell you what I do J.
> I'm assuming the folders are names reflect the username, so in your example,
> your username is bwatson. I use a tool called FileACL
> (http://www.gbordier.com/gbtools/fileacl.htm). I'm sure
> something similar could be done with Subinacl, SetACL, but this is what I
> had at the time, and it's worked well and speedily.
>
>
>
> ----perm.bat-----
>
> fileacl %1 /INHERIT /SUB /FORCE /FILES /REPLACE
>
> fileacl %1 /s "DOMAIN\%1":f /d "DOMAIN\%1":PDO/U/U
>
> fileacl %1 /O "DOMAIN\%1" /SUB /FILES
>
> fileacl %1 /O Administrators
>
> ----end-------
>
>
>
> Then, from the root, run:
>
> For /D %i in (*.*) do perm %i
>
>
>
> The first line basically clears any perms that exist and sets the whole
> sub-tree to inherit the perms defined on the root. In your case DA and FA
> at full control.
>
>
> Line 2 sets 2 ACLs. The first is an allow for the user to have full control
> of the folder. The second is a Deny so they can't delete the folder, change
> the permissions, or take ownership of their folder.
>
>
>
> Line 3 sets them as the owner of all files/folders
>
>
>
> Line 4 sets the owner of their root folder back to administrators. This
> locks the deny permission in line 2 since, if they were the owner, they
> could remove the Deny.
>
>
> ________________________________
>
>
> From: ActiveDir-owner@mail.activedir.org
> [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of
> WATSON, BEN
> Sent: Wednesday, May 30, 2007 4:38 PM
> To: ActiveDir@mail.activedir.org
> Subject: [ActiveDir] [OT] Home Folder Data Migrations
>
>
>
> Not Active Directory related, but thought I would ping the list for ideas.
>
>
>
> We used to have a single Network Appliance Filer, which contained virtually
> all our data. Our needs have grown and we have purchased a new NetApp filer
> and need to move the home folders for all the users to a share on the new
> NetApp filer.
>
>
>
> I have the permissions set properly for the folder that will contain the
> home folders (basic permissions, Domain Admins with Full Control and an
> additional security group called FilerAdmins with Full Control), however I
> need to set the security permissions on each individual home folder so the
> user who owns the folder has full modify rights. So for the bwatson folder
> for instance, it should have Domain Admins full control, FilerAdmins full
> control, and myself with read/write privileges. And so on and so forth for
> each user.
>
>
>
> Any thoughts on how best to accomplish this and add each individual user to
> their respective folder with modify rights?
>
>
>
> Thanks for any input.
>
>
>
> ~Ben
List info : http://www.activedir.org/List.aspx
List FAQ : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.activedir.org/ma/default.aspx
.+- 0jq.+- 0ˊEKj!ibbןjm | | | |
|
|