Users & Groups

[Guest]

I'm preparing to migrate a number of shares and local groups from one server to another, both are in the same domain.

Is there a preferred method when copying both groups and shares as to what is done first? Should I copy the shares first and then the local groups or vice versa or does it not matter?

Also, I'm a little confused with the "Copy Group(s)" command. I viewed the help and it appears as if I should use the "Copy group members by SID..." When I select the "Copy group members by SID..." option by itself the group members do not copy over but if I check "Copy group members" option by itself they do copy. Is this right? It appears to contradict what's written in the Help file.

Thank you.

Brian Elkins

[This message has been edited by belkins (edited 01-26-2005).]

[This message has been edited by belkins (edited 01-26-2005).]

[cmccullough]

Re: Users & Groups

I believe you will want to copy the groups first, but I don't understand your question on the group copy portion. You said it worked when you didn't choose the SID option, correct? If so, that the option that worked would be the one to use.

[kstanush]

Re: Users & Groups

If the group is being copied to another computer in the same domain, and if the group members are part of the domain, you can use the option to copy by SID, as this will result in the same exact members. Group members can be expressed either as SIDs or by name. The SID option is good if you want to clone a group, but it requires that the destination server understand each SID exactly.

Copying by name is useful if the group includes local users only, which therefore would require that the SID be different between one server and another.

This is a hard topic to explain, so let us know if you have questions.

[Guest]

Re: Users & Groups

Thank you for the replies. Reading over my question I can see that it may have not been very clear.

What I meant to say is the groups copied over but the membership of the groups did not.

Rephrasing: When I select the "Copy group members by SID..." option by itself the groups copy over but the group members do not but if I check the "Copy group members" option by itself, without checking any other box, the groups and group members both copy. Is this right? It appears to contradict what's written in the Help file.


This brings up another question though. The groups are all local groups on this particular server. When I copy the groups over to the other server is there a way to have the group reflect the name of the new server.

What follows is an example if you look in the Members area after double-clicking on the group.

Group name on Server 1:
"Server1\Group1"

Group name on Server 2 after the copy:
"Server1\Group2" but I want it to reflect the new server name as local groups do so it would appear as "Server2\Group2."

Hopefully this is clear. If not please let me know and I will point to a webpage where I can post pictures unless there is a way to post them here.

Thank you.

Brian Elkins


[This message has been edited by belkins (edited 01-26-2005).]

[kstanush]

Re: Users & Groups

I don't understand why the group members would not copy if you selected the copy by Sid option.

However, in looking at the dialog, it was designed poorly (by me). If you want to copy groups, the first checkbox for "Copy Group Members" needs to be checked. Then, either or none of the other two options can be checked. If you want to copy by SID, you have to essentially check two boxes.

There isn't any way to change the name on a copy, however. I think your best option to do that would be to look in the Resource Kit for some sort of command line "CopyMember" application. Or, use the Net LocalGroup /etc. option to just write a large batch file to add your group members that way.

[Guest]

Re: Users & Groups

The servers are in the same domain and I am copying the local groups and shares from one server to the other.

Once the copy is done I am planning on deleting the local groups and shares on the "copying from" server.

Should I copy using the SID function or not?

Thank you.

[This message has been edited by belkins (edited 01-27-2005).]