Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We have to change our domain due to a corporate mandate, we can't to it all at once because of this, that, and the other thing.

We need users on both domains to be able to access our network shares. Is there a way to mirror file permissions from one domain for the new domain?

For example:

The domain Nebraska has a share called Public, members of the group Nebraska/PublicUsers have full rights. The new domain America has access to that share as well, I want members of America/PublicUsers to have full rights too.

Is there a tool that will look in the share Public, find Nebraska\PublicUsers, then ADD America\PublicUsers to that folder based on a *\xyz search?

share|improve this question
up vote 2 down vote accepted

The free SetACL can do exactly what you want. Have a look at this example

In the example, users/groups from Domain A are replaced with corresponding users/groups from Domain B, but SetACL can copy permissions from Domain A to Domain B just as well. Just change "da:repldom" to "da:cpydom". See the documentation for details.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.