How to fix permissions issue from a file server migration between 2 domains?

ChrisSE243 0 Reputation points
2024-01-08T19:40:28.9833333+00:00

I have a file server migration project that is currently giving me some permissions issues. This is between 2 different domains(Lets call them Alpha and Beta domain), they both have validated trusts between each other and are on the same network. I have tried two different routes to migrate the data, one using a 3rd party app (SyncbackPro) that copies all existing permissions from the original server (Windows 2016 Standard) on Alpha domain to the new server (Windows 2019 Standard) on Beta domain. The second method using a cloud backup service to just restore the folders/files with original permissions intact to the new server on Beta domain.

Both routes mostly transfer the data successfully over with some errors that usually occur about 6+ hours in, which my guess is just because of the sheer amount of files, the transfer service crashes but i think that is a separate issue. I manually have checked the security permissions on the folders, all permissions that should be there, do show up.

The main issue now is all the migrated files on the new server in Beta domain, it seems we somehow lose all admin rights to the folders even though the security settings show we have them. Every time I try to open, move, or even delete the folders I get an error "You require permissions from Administrators to make changes to this folder", even though I have tried this while logged in as a domain admin or a local admin. When i try to manually re-add full control on the folders to the admin groups i get "Failed to enumerate objects in the container. Access is denied." I have tried completely turning off UAC, running explorer.exe as an admin, and changing the folder owner(which it will not let me, gives me the same error message).

I had a thought to just add Beta Domain admin permissions to the folders before migrating from Alpha to Beta but when I tried doing that to the high parent folders, it always gets interrupted by something that fails admin authentication even though the sub folder/file permissions shouldnt change (there are too many files to check each of them one by one) and it ends up causing more problems since i have to end up stopping the permissions change part-way since i have no idea when the auth errors may stop.

Side question if anyone knows, why can 3rd party apps change permissions for so many files in about 10 minutes while using windows explorer it would literally take hours for the same task?

Any insight or ideas to troubleshoot this issue would be greatly appreciated!!

Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,898 questions
Windows Server Migration
Windows Server Migration
Windows Server: A family of Microsoft server operating systems that support enterprise-level management, data storage, applications, and communications.Migration: The process of making existing applications and data work on a different computer or operating system.
408 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Thameur-BOURBITA 32,586 Reputation points
    2024-01-08T20:26:28.05+00:00

    Hi @ChrisSE243

    Side question if anyone knows, why can 3rd party apps change permissions for so many files in about 10 minutes while using windows explorer it would literally take hours for the same task?

    You should ask the support of 3rd party apps , they should know how their product works.

    You can also use robocpy command to copy date and permissions.

    robocopy command let you fix permission issue through this option /secfix. to get more details please read the following link :

    Robocopy - Microsoft Learn

    Robocopy Examples With Screenshots

    Please don't forget to accept helpful answer

    0 comments