MIgration. in Hell

Elrond elrond at samba.org
Wed Jul 5 13:40:55 GMT 2000


On Wed, Jul 05, 2000 at 10:08:39PM +1000, Simo Sorce wrote:
> Elrond wrote:
> > 
> > Just one thing, you have to keep in mind:
> > 
> > The new users will have new SIDs, and the ACLs inside the
> > ntuser.dat are not letting in that user... so they will get
> > problems with the profile...
> > 
> > I've no good idea, how you could fix this in a
> > batch-operation...
> if all the users profile are in the same directory and the profile
> directory has exactly the same name of the unix user than after creating
> the user account in passwd you may simply  make a scipt like this:
> --------------------cut here------------
> #!/bin/bash
> cd /path/to/profiles
> for i in *
> do
> chown $i $i

chown -R $i $i

> done
> --------------------cut here------------

Well, that fixes the unix-permissions, of course you have
to do that too.

The problem is:

There's a file called ntuser.dat inside the profile, and
this file contains (inside it!) also ACLs, that only allow
the old user to read/modify it. The new User will not be
able to read/modify it...

Fixing this for one ntuser.dat isn't a problem, there are
numerous methods to do it (regedt32, System Control, ...)

But I don't know a method to do it in a batch operation.



More information about the samba-ntdom mailing list