A project is underway to migrate from an existing local Active Directory domain to a new Global domain.

Is the use of  Microsoft's SubInACL utility the most effective method to change the file / directory permission for the CIFS shares under Data ONTAP to reflect the new Global domain?