After having two separate companies merge into one, we were left with two existing environments, a Novell environment, and an Active Directory environment. Prior administration decided not to merge them, and instead maintain both environments separately, making duplicate users, one in Novell to access those directories, and one in Active Directory, to grant access to those network shares and company e-mail.
Current administration is ready to phase out the increasingly ancient Novell servers, so we are preparing to migrate the Novell data to our existing Active Directory structure.
My concern right now is that we need to have permissions match up to a folder level extent (we're not worried about granular file permissions), but if we run MSDSS for the files only, we will need to go back and manually grant permissions. However, if we run MSDSS to totally merge NetWare Admin and ADUC, the user Jane Doe will end up with 2 ADUC accounts, her original ADUC of Jane.Doe and now an additional that would come from Novell, JaneD.
My question is: Is there a way for MSDSS to look at the information for JaneD and see that it matches a user account in ADUC, and decline to create a new account, but apply the permissions JaneD has to the migrated Novell-to-Windows data sets?