Burt 14378 addresses this problem. It is fixed in a future release. When changing the filer's domain, if the builtin/administrators group contains the old domain's administrators group, it is removed and the new domain's administrators group is added.

Joan Pearson

From: Karl Erik Øyøygard karl@proact.no To: toasters@mathworks.com Subject: RE: Moving from one NT domain to another. Date: Wed, 9 Aug 2000 19:23:44 +0200 X-Mailer: Internet Mail Service (5.5.2650.21) X-MIME-Autoconverted: from quoted-printable to 8bit by smtp.mathworks.com id NAA27433 Sender: owner-dl-toasters@netapp.com

Jeremy,

You are right, the administrator (DomainAdmins) of the OLD domain will still be member of the local administrators on the filer after the move, because Lclgroups.cfg is not updated.

This is how I do this:

Rename cifssec.cfg, filersid.cfg and lclgroups.cfg in /etc on the filer. Add filer via servermanager to the new domain. Run `cifs setup` Edit /etc/cifsconfig.cfg and remove all referances to users/groups in the old domain. They will not show up correctly in FilerView! And you may have to correct the ACL's on a LOT of files... Remember to set new users as owner of home directory's for cifs homedir to work...

I'm not sure you need to get cifssec and filersid out of the way, but it will work if you do.

Good luck!

-OYOY-

Med hilsen - Best Regards, Karl Erik Øyøygard ProAct Systems AS Postboks 3047 - Lade Haakon VII's gt. 7 7002 Trondheim Tlf: 73 92 21 44 Fax: 73 92 08 88 Mob:93 25 24 24

E-mail: karl@proact.no SMS: +4793252424@sms.netcom.no

---

For every complex problem there is an answer that is clear, simple, and wrong. -- H L Mencken

...

We have an interesting problem that I'm hoping somebody on the list has first-hand experience with. We could use some suggestions.

We are going to be moving from one NT domain to another. An account in Domain A, user1 does not have the same SID as the same account name in Domain B, so once you move, you would have to go through and reassign access permissions with the account in Domain B. This would be acceptable

to us, but the problem is the same situation occurs for Administrator between the two domains, so we're worried about losing Administrator access to our filer. We would be able to put up with reassigning all user permissions afterward if we could resolve the Administrator problem.

The question is, how do we move a filer from one NT domain to another, and

still have Administrator access to it afterward?

Thanks,

-- jeremy