"security descriptor" error when copying permissions with robocopy

[JamesW]

Has anyone else had this problem using robocopy? I am using robocopy
\\server1\share \\server2\share /SEC
On some directories, it seems where inherit permissions is not set, I get
the message "the security descriptor structure is invalid". Now if I copy
without an security info it works great. has anyone else seen this? I am
actually copying from a network appliance but I don't think the problem is
related to that. I am using Robocopy XP010. I have tried several other
robocopy switches and if any security information is being copied on those
directories they fail.

[Jason Tan[MSFT]]

Hi,

Thanks for posting!

I understand that when using robocopy utility, it prompts "the security
descriptor structure is invalid". If I have misunderstood your concerns,
please feel free to let me know.

Please help me know if the shared file is migrated from other system. Based
on my research, it could be the cause that the shared file has invalid
security id. I would like to provide you with the following information for
your reference:

The CHKDSK utility incorrectly identifies and deletes in-use security
descriptors
http://support.microsoft.com/default...b;en-us;831374

Chkdsk Finds Incorrect Security IDs After You Restore or Copy a Lot of Data
http://support.microsoft.com/default...b;en-us;327009

Hope the information helps. If there is anything that is unclear, please
feel free to let me know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[JamesW]

Jason,
Thanks for the reply. You are exactly right. The folders that would not
copy had invalid SIDS. We were migrating to an EMC Celerra and the problem
was a setting on it that controlled behavior when an unresolvable SID was on
a directory/file. We changed it to allow invalid SIDS and robocopy is
working fine now.

"Jason Tan[MSFT]" wrote:

> Hi,
>
> Thanks for posting!
>
> I understand that when using robocopy utility, it prompts "the security
> descriptor structure is invalid". If I have misunderstood your concerns,
> please feel free to let me know.
>
> Please help me know if the shared file is migrated from other system. Based
> on my research, it could be the cause that the shared file has invalid
> security id. I would like to provide you with the following information for
> your reference:
>
> The CHKDSK utility incorrectly identifies and deletes in-use security
> descriptors
> http://support.microsoft.com/default...b;en-us;831374
>
> Chkdsk Finds Incorrect Security IDs After You Restore or Copy a Lot of Data
> http://support.microsoft.com/default...b;en-us;327009
>
> Hope the information helps. If there is anything that is unclear, please
> feel free to let me know.
>
> Thanks & Regards,
>
> Jason Tan
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> =====================================================
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> =====================================================
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>

[Jason Tan]

Hi,

Thanks for prompt update!

It seems that everything work fine. If you have any other questions or
concerns, please feel free to let us know.

Thanks & Regards,

Jason Tan

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[aimejo]

Could someone please tell me how to configure Robocopy to copy directories and files with invalid SIDs? The switches I am currently using are:
/MIR /E /COPYALL /LOG+:"Shares nearstore1 to san1 copy1.txt" /ZB /R:1 /W:3

Thanks!
Aime

[Mike Luo [MSFT]]

Hello,

Thank you for using newsgroup!

You may add /sec switch, /sec copy files with security. You also may run
robocopy /? command to get more switchs for robocopy.

Mike Luo

Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.