ADMT (even in V3) doesn't support this directly, however, you can still use it to do the re-ACLing if you want, since you can feed it with a list of SID mappings. You would still have to perform the bulk of the work yourself, which would be to re-create matching groups in AD and to add the members of the server-local groups to the AD groups. While doing this, you'd create your SID mapping-file.
I know that Quest's DMW tool has the capability to do all of this for you (i.e. migrate server local groups to AD incl. membership and re-ACLing the server appropriately) - but you might also want to Google around a little for scripts that serve this purpose. /Guido From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thommes, Michael M. Sent: Donnerstag, 25. Januar 2007 04:19 To: ActiveDir@mail.activedir.org Subject: [ActiveDir] moving server local groups to AD? (I sure hope this doesn't sound like too dumb a question!) We have a server where local security groups were created for local file access. The files on this server are going to be moved to a file server cluster. Can ADMT v3 migrate these security groups up to the AD structure with the hopes of retaining SIDHistory and therefore access to the moved files? If ADMT wouldn't work, does anyone have suggestions for this operation? As always, any help is appreciated! Mike Thommes
