Thanks. -----Original Message----- From: Kurt Buff [mailto:[email protected]] Sent: Friday, May 08, 2009 3:18 PM To: NT System Admin Issues Subject: Re: Disjoin - rejoin question
On Fri, May 8, 2009 at 11:42, Richard Stovall <[email protected]> wrote: > I have a file server that is throwing all kinds of weird events.�� No other > member server or workstation is having trouble. > > > > If I disjoin it from the domain and rejoin it, will all of the shares and > share permissions, etc. be preserved?�� I have����t had to do this in a long, > long time and I just d�����t remember. > > > > Thanks, > > RS Yes - shares are listed in the registry, with the ACLs all set up there. The file/directory perms are stored with the file on disk, with the ACLs contained in the MFT, IIRC (someone correct me on the exact location if I'm wrong). Regardless, the ACEs that are contained in the ACLs are listed by bare SID, and if you view them while the machine is no longer in the domain, they'll show in all their naked numeric glory - one of mine is S-1-5-21-1262503660-1468013928-1435325219-3812. You see the same thing if you have deleted an account (or group!) and it's still listed in an ACL on a file/directory or share, whether the account/group was local to the machine or resided in the domain. Kurt ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
