converted windows 2003 file server - now permission issues

[capkirk]

just this weekend I used the convereter to move our windows 2003 file server (dns server also and primary DNC) over to our new esx server.

everything seemed to go fine, no errors, until everyone came in on tuesday morning.

I am getting complaints that some people no longer have permissions to certain folders.

some people lost permissions on their personal folders,
even stranger, we have a folder called PUBLIC, everyone has access to it. people create folders in there to share with everyone else. yet for only some people, some of the folders in the public are denying them access! other folders work just fine. I look and I see the correct rights assigned. I just dont get it.

the only errors I see are a bunch of pre-authentication errors, I cannot find anything specific to a folder.

has anyone else ran into this when using vmware converter?

 

[mrdenny]

I've never seen problems like those when using the VMware converter.

When you converted the box did you change the SID? How about the IP address? Maybe some people are trying to hit the old IP or something?

Denny
MCSA (2003) / MCDBA (SQL 2000)
MCTS (SQL 2005 / Microsoft Windows SharePoint Services 3.0: Configuration / Microsoft Office SharePoint Server 2007: Configuration)
MCITP Database Administrator (SQL 2005) / Database Developer (SQL 2005)

My Blog

 

[capkirk]

no, everything should be the same.
didnnt change the sid or IP.
is there anything I SHOULD have changed?
I didnt think there was.


I have even seen some folders were permissions were gone or removed.
it had to happen during the conversion, but I didnt see any errors after it finished.

its probably only 10 percent of the folders whose permissions are wrong or missing, but 10 percent of 200 is still a pain.

 

[NickFerrar]

When you say primary DNC do you mean DC? If so I've read about some funky stuff happening with converted DCs. I'd also recommend not running a DC as a file server anyway, it's just inherently insecure. Personally I'd build a new DC VM and copy the roles to it then de-promote the DC role from the physical file server then reconvert it.