Here's a little script I use to set permissions and ownership on our users' home folders.  I run this periodically to ensure our quotas are reflecting the proper users:  yes.txt simply contains Y with a hard return.  na_ntfschown is available from the NOW site in the tools downloads.
 
net use x: \\filer\users /persistent:no
x:
for /d %%f in (*) do cacls %%f /t /c /g Administrators:F System:F domain\%%f:C < pathtoscript\yes.txt
for /d %%f in (*) do pathtoscript\na_ntfschown /r domain\%%f %%f
c:
net use x: /delete


From: owner-toasters@mathworks.com [mailto:rkelley@forsythe.com]
Sent: Thursday, March 09, 2006 9:48 AM
To: toasters@mathworks.com
Subject: SubInACL? What is the most effective method to change permission on CIFSshares?


A project is underway to migrate from an existing local Active Directory domain to a new Global domain.

Is the use of  Microsoft's SubInACL utility the most effective method to change the file / directory permission for the CIFS shares under Data ONTAP to reflect the new Global domain?