Permissions

Permissions

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Permissions Graeme 01-04-2006
|--> Re: Permissions Miha Pihler [MV...01-04-2006
`--> Re: Permissions Roger Abell [MV...01-05-2006
Posted by =?Utf-8?B?R3JhZW1l?= on January 4, 2006, 12:34 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

I am going to dcpromo W2003 std edition DC from it's domain and dcpromo it
into another w2003 domain.

It acts as a file server as well for it's domain and has NTFS permissions
assigned to various directories and files.

What happens to permissions when DCPROMO'd and joinjed to another domain?
Does the everyone group get to see it all? I'm keen not to lose data as some
of the permissions were set solely to groups and not administrator access -
don't ask, not by me!!
Help appreciated

Posted by Miha Pihler [MVP] on January 4, 2006, 1:25 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi,

If you do this -- you will lose more or less all permissions since SIDs are
going to change.

Local or domain administrator can always take permissions back -- it doesn't
matter what they were set to. Once you have permissions back, you can then
change them to anything you like.

How to take ownership of a file or folder in Windows XP (it is practically
same for Windows 2000, 2003, ...)
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421&sd=tech

--
Mike
Microsoft MVP - Windows Security


> Hi,
>
> I am going to dcpromo W2003 std edition DC from it's domain and dcpromo it
> into another w2003 domain.
>
> It acts as a file server as well for it's domain and has NTFS permissions
> assigned to various directories and files.
>
> What happens to permissions when DCPROMO'd and joinjed to another domain?
> Does the everyone group get to see it all? I'm keen not to lose data as
> some
> of the permissions were set solely to groups and not administrator
> access -
> don't ask, not by me!!
> Help appreciated



Posted by Roger Abell [MVP] on January 5, 2006, 1:10 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
You have not provided sufficient information.

If the existing DC is not the only DC of that domain,
and if the new domain into which you are going to add
the machine is in the same forest, then you will only
loose permission grants/denies that are relying (directly
or indirectly) upon global groups of the old domain.

The ACLs on the storage will remain unchanged.
However, whether it is at all meaningful after the
change depends on what the principals are that
have been used, whether the old domain still exists,
and whether we are talking about an all in one forest
event.

> Hi,
>
> I am going to dcpromo W2003 std edition DC from it's domain and dcpromo it
> into another w2003 domain.
>
> It acts as a file server as well for it's domain and has NTFS permissions
> assigned to various directories and files.
>
> What happens to permissions when DCPROMO'd and joinjed to another domain?
> Does the everyone group get to see it all? I'm keen not to lose data as
> some
> of the permissions were set solely to groups and not administrator
> access -
> don't ask, not by me!!
> Help appreciated



Similar ThreadsPosted
Permissions July 6, 2006, 9:40 am
Permissions question August 22, 2005, 6:05 pm
NTFS Permissions September 12, 2005, 8:49 am
file permissions October 10, 2005, 12:30 pm
HiJackThis will not run? Permissions? November 11, 2005, 2:16 am
Dropbox permissions December 13, 2005, 5:17 pm
NTFS Permissions January 30, 2006, 5:33 am
View Only Permissions March 14, 2006, 12:09 am
NTFS Permissions March 24, 2006, 7:02 am
My documents permissions June 26, 2006, 8:33 pm

The site map in XML format XML site map

Contact Us | Privacy Policy