Fix acl on copied data

Question

I have recently migrated a domain. As part of the migration we created a trust and the copied the users & security groups from that domain to out AD. Today we got a copy of the shared data. This data included all the old ACL’s. Unfortunately these ACLs still relate to the old domain. I’ve been trying to change these using get-acl / set-acl but I’m having no luck. I was wondering if anyone had a script that can do this?

Answer 1

This is what I have currently that display the permissions, but where i go from here is beyond my unfortunately

$FolderPath = Get-ChildItem -Directory -Path "FilePath" -Recurse -Force
$Output = @()
ForEach ($Folder in $FolderPath) {
    $Acl = Get-Acl -Path $Folder.FullName
    ForEach ($Access in $Acl.Access) {
$Properties = [ordered]@{'Folder Name'=$Folder.FullName;'Group/User'=$Access.IdentityReference;'Permissions'=$Access.FileSystemRights;'Inherited'=$Access.IsInherited}
$Output += New-Object -TypeName PSObject -Property $Properties            
}
}
$Output | Out-GridView

Answer 2

The subinacl utility from the old Win2003 Resource Kit has a /replace switch which I used on Win10 to replace one local group with another.

subinacl /subdirectories c:\temp\foo1\ /replace="Netmon Users"="IIS_IUSRS"  

It also has some domain migration switches, but I no longer have access to an AD domain to test with.

/action      :  
    /replace=[DomainName\]OldAccount=[DomainName\]New_Account  
    /accountmigration=[DomainName\]OldAccount=[DomainName\]New_Account  
    /changedomain=OldDomainName=NewDomainName[=MappingFile[=Both]]  

I have SubInAcl version 5.2.3790.1180, but I don't remember where I got it from. I looked for it on MS's download site but I can't find it.

I found this link, but I don't know if I trust it. If you download it, I'd recommend doing it in a sandbox environment and scan for malware. And definitely test it on some sample folders before you touch your main data.

https://windows-resource-kit-tools-subinacl-exe.software.informer.com/

@Rich Matheisen any help with subinacl?

Answer 3

Did subinacl work or are you still looking for a script?