Switching to Windows Server Essentials 2016 - how does one handle folder / file ownership and security...


Recommended Posts

Whenever I reformat or upgrade in place, the old installation leaves behind accounts that are then recognized as "S1-..."  and the owner of the files is unknown.

 

These are files / folders on other drives.  Is there some specific way to handle the migration so these permissions / owner settings is handled in the process?  Or do I have to claim ownership after the fact manually for each that needs changing while removing the ghost entries.

Also network shares on folders - does it make sense to remove these

I've been doing this for years without really knowing if there is an appropriate way of handling

If you do an upgrade to 2016 this wont happen. But when you wipe and load a DC you will have to reapply the security permissions the sid's no longer match even if the domain name is the same.

I did an upgrade and saw the S1s and unknown owners.   I ended up having to image back to 2012 because of issues with my drives.  I'll likely try again in a few days and guess just manually go through the process.  I was wondering if there was a better way of handling it but doesn't seem like it's the case.

i get by it when migrating servers by using robocopy and the relative switches (Secfix etc) to copy the old ntfs perms over. Dont know if thats possible for you, is the 2016 server on the hardware that 2012 was?

 

If you are using the same shares, you can also extract the reg key from Lanmanager in the registry.

  • Like 2
  On 21/01/2017 at 21:17, Mando said:

i get by it when migrating servers by using robocopy and the relative switches (Secfix etc) to copy the old ntfs perms over. Dont know if thats possible for you, is the 2016 server on the hardware that 2012 was?

 

If you are using the same shares, you can also extract the reg key from Lanmanager in the registry.

Expand  

Robocopy is awesome. We were able to migrate 50+ TB from a Sun Thumper to an EMC Isilon 7 PB server with no permission issues. Made us pretty happy. :)

  On 22/01/2017 at 03:00, AndyD said:

Yeah, same hardware.  I'll give both a look.  Thanks!

Expand  

i can sort you with the switches to use, I kept a note of them at work, ill look them out. 

 

@norseman yep, as long as you remember the retry and wait switches, so if it cant manage a file or subdir, it will retry x amount of times after x amount of time, a total godsend combined with SECFIX etc. with Windows, i saved days of work by extracting the LANManager reg entries from the source file server and merged it into the registry of the new 2012 R2 server, so even the shares had the right perms :) combined with robocopy, it saved literally 20 or so man hours.

 

@op due to it landing on same hardware, any way you could build a VM of the 2012 setup, run on a host and migrate your shares that way? as youll need both servers "alive" at the same time to use Robocopy.

  • Like 2
This topic is now closed to further replies.
  • Recently Browsing   0 members

    • No registered users viewing this page.
  • Posts

    • Download old Windows Startup Sounds @ https://www.winhistory.de/more/winstart/winstart_en.htm
    • Surface Copilot+ PCs coming to classrooms from July 22, turbocharged with on-device AI by Paul Hill Microsoft has announced that it’s launching the new Surface Pro 12-inch and Surface Laptop 13-inch models specifically for education customers from July 22. The Redmond giant said that these devices are being launched as a direct response to feedback from educators who want practicality and ease of use in their diverse classrooms. These are both Copilot+ PCs so teachers and students will be able to leverage the latest AI features thanks to the dedicated Neural Processing Units (NPUs) that allow for on-device AI. The on-device AI, aside from delivering well-known features like Recall, will enable new education features such as a new app Microsoft is working on called Microsoft Learning Zone. Microsoft Learning Zone will allow teachers to create personalized lessons by adapting content from trusted sources like OpenStax, generating interactive games with Kahoot, and tracking students progress. Microsoft expects this to help teachers save time and deliver a more flexible and engaging classroom. Another AI feature that will be available is Click to Do. This lets students highlight text or images and get contextual help. It can be used to summarize a paragraph or explain a graph. To activate it, students can press the Windows key and click. This feature runs entirely on device so inputs to the AI are secure and you don’t need to ever worry about third-parties seeing. Finally, these devices will also have accessibility features such as Voice Access which lets you navigate with speech and Live Captions which provide real-time subtitles and translations for spoken content. These make the devices more inclusive for students with disabilities. Regarding security, these laptops come with the Microsoft Pluton security chip directly integrated into the processor for protecting sensitive data. It can protect data such as passwords and sign-ins, even if your device is stolen. Thanks to automatic Windows Updates, schools never need to worry about falling behind on updates either. With the impending demise of Windows 10 in mid-October, these Surface devices arrive just in time for schools looking for somewhere to upgrade to. Aside from AI features and security, Microsoft is also pushing other key features including easy repair with replacement components at the Microsoft Store and iFixit, their lightweight design and all-day battery life making them ideal for carrying and surviving the school day, and their compatibility with popular education apps such as TestNav, Google Classroom, Minecraft Education, and Adobe Express.
  • Recent Achievements

    • Rising Star
      Phillip0web went up a rank
      Rising Star
    • One Month Later
      Epaminombas earned a badge
      One Month Later
    • One Year In
      Bert Fershner earned a badge
      One Year In
    • Reacting Well
      ChrisOdinUK earned a badge
      Reacting Well
    • One Year In
      Steviant earned a badge
      One Year In
  • Popular Contributors

    1. 1
      +primortal
      545
    2. 2
      ATLien_0
      205
    3. 3
      +FloatingFatMan
      170
    4. 4
      Michael Scrip
      149
    5. 5
      Som
      131
  • Tell a friend

    Love Neowin? Tell a friend!