SubInAcl Topics | Previous

Domain Migration With SubInAcl


The main purpose of SubInAcl is to help administrators to migrate users when the domain architecture has changed.

Example One

The user User1 has moved and is now member of the DOMB organization. You can reflect this change with:

subinacl /subdirec \\server\share\*.* /replace=OldDomain\User1=DOMB\User1

 

note-icon

Note

A trust relationship must be enabled between the domains of \\server, OldDomain, and DOMB.

Example Two

You have worked with a unique domain. You want to migrate a backup domain controller (BDC) named MIGRCONTROL with all the files and the users to a new domain.

  1. Reinstall the BDC as primary domain controller (PDC) to the NEWDOMAIN (without erasing the files).
  2. Create the users on NEWDOMAIN.
  3. Create a "trusted relationship" with OLDDOMAIN.
  4. Run subinacl /noverbose /subdirectories x:\*.* /changedomain=OLDDOMAIN=NEWDOMAIN
  5. Verify the changes with SubInAcl /noverbose /subdirectories x:\*.*

Example Three

You have worked with a standalone server named SERVER in a workgroup environment. You want to move this server (including users) to a domain DOM.

  1. Move SERVER to the domain DOM.
  2. Create the users in the DOM domain.
  3. Run subinacl /noverbose /subdirectories \\server\share /changedomain=SERVER=DOM

For more details, see the /changedomain, /migratetodomain, and /replace actions.