question

Chong-7118 avatar image
0 Votes"
Chong-7118 asked Chong-7118 commented

Add other trust domain permission in file server

Hi,

I have migrate AD object from domain A to domain B by ADMT. After user migrate to domain, domain B user can access the file servers in domain A as the SID history is added in user account.

We have around 30 file servers in domain A. As we don't have resource, we will not migrate the file server by ADMT. The file server will just disjoin from domain A and rejoin into domain B.
The question is how can I export the NTFS permission and Share permission which user are @domainA, then import the permission which are @domainB. So the same set of domain B permission can add into the share folder.

(For example: userA@domainA.com have full access in share folder, how can add the userA@domainB.com full access permission to the same folder)

Seems icacls can export and import the NTFS permission, but share permission not work. Any tools or cmdlet can do this?

Thanks

Best Regards
Chong

windows-serverwindows-server-management
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

LimitlessTechnology-2700 avatar image
0 Votes"
LimitlessTechnology-2700 answered Chong-7118 commented

Hello @Chong-7118

This is possible, yes. You can use examples in the next official article as base for your commands: https://docs.microsoft.com/en-US/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/cc753525(v=ws.11)

Hope this helps with your query,


--If the reply is helpful, please Upvote and Accept as answer--

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @LimitlessTechnology-2700

The link is invalid

Best Regards
Chong

0 Votes 0 ·