Transfer of user rights from one server to another. How to upload permissions to a file?

Question

Access rights

Good day, colleagues!
There is a fs01 server (not in the domain) with a shared folder (rights are given to groups). There is a domain controller dc1. On fs01 users and groups are brought. Absolutely the same users and groups are set up on dc1. It is necessary to include fs01 in the domain, remove (disable) users and that the rights to the folders already have domain users exactly the same as the local duplicates of these users. In general, what means (crypts) to consider the rights to folders and attachments to a file, correct users in this file on the domain and assign back to the shared folder?

Answer 1

To be safe, you can unload the rights using Icacls:
Icacls E:\* /save tempACL /t
Icacls D:\* /save tempACL /t
can be restored with the command: Icacls E:\* /restore C:\tempACL
utility subinacl unload file rights and folders:
subinacl /noverbose /output=c:\perm_dir_public.txt /subdirectories=directoriesonly E:\*\*.* > dir.out 2>&1
subinacl /noverbose /output=c:\perm_file_public.txt /subdirectories=filesonly E:\*\*.* > file.out 2>&1
in perm_dir.txt and perm_file.txt files with unloaded permissions are replaced using a text editor.
use the takeown and icacls utilities to reset the permissions to the standard ones:
takeown.exe /f "E:\*" /r /dy
icacls.exe "E:\*"
set permissions with subinacl:
subinacl.exe /playfile c:\perm_dir_public.txt > dir.log 2>&1
subinacl.exe /playfile c:\perm_file_public.txt > file.log 2>&1