Exporting Share Permissions

[david]

Is there a tool to export the share permissions of a directory to a
text file? And also to restore share permissions from a file?

Subinacl is great at doing this for NTFS permissions. Please tell me
there is a tool like this for share permissions.

[Frances [MSFT]]

Hello David,

Good to hear from you.

According to the message, I understand that you want to find a tool to
export and import share permissions.

After research, I find the command tool permcopy, which can copy the share
permission from one share to anther. Since I am not sure of the system you
are referring, I offer the following articles for your reference. Please
have a check.

Permissions Tools and Settings
http://www.microsoft.com/technet/pro.../library/TechR
ef/c84df90e-7ef6-470e-b564-656e2547186a.mspx

301940 How To Migrate Objects from One Domain to Another in Windows NT
http://support.microsoft.com/?id=301940


We can also copy share permissions by copying the related registry key.
Please refer to the following article for more details.

Please note: this article is applied to NT. Regarding win2k and win2k3
server, I suggest that you make a test and check the effect.

265704 How to Retain NTFS File and Share Permissions When You Move Files and
http://support.microsoft.com/?id=265704


Hope this helps. If you have any further questions, don't hesitate to get
in touch!

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[david]

Thanks for your responce, but I need a tool that dumps the share
permissions TO A TEXT FILE. This is so I can edit the text file and
then restore it on another machine.

[david]

I've done a little more research and from what I've gathered the share
permissions are set from a registry key.

This is probably a long shot, but is there a way to restore the share
permission for only one partition instead of the entire O/S? I am
migrating from a Windows 2000 machine to a Windows Server 2003-Active
Directory machine.

[Frances [MSFT]]

Hello David,

Thanks for the reply.

As far as I know, there is no such tool to dump the share permissions to a
text file.

As for the registry key, yes, windows stores the NTFS permission's with the
file but the share information along with share permissions are stored in
registry as follows:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares.

To restore the share permission, please follow the steps below.

1. Restore the folder from the backup to the original location.

2. Restore the system state to an alternate location.

3. Open the regedit.exe

4. Highlight the HKLM and go to File-->Load Hive.

5. Browse to the location where the system state was restored.

6. Select the "System" Registry file and click ok.

7. Give a name "backup Registry".

8. Browse to HKEY_LOCAL_MACHINE\Backup
registry\ControlSet001\Services\lanmanserver\Shares.

9. Export the registry key.

10. Follow the article below to restore share permissions.

141589 How to Restore Share Definitions To Another Server
http://support.microsoft.com/?id=141589


As for restoring the share permission for only one partition instead of the
entire O/S, please check the registry key and make some tests. Also please
take a look at the article 265704. I believe they are helpful.

Because this newsgroup is here to provide break/fix resolution, and your
question appears to be more consultative in nature, we are only offering
some general information. If you have related break/fix issues during the
tests, you are welcome to post back in this newsgroup. We are happy to help
you with them. Thank you for your understanding.



Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[david]

Thank you for the responce, Frances. I exported those keys to a floppy
disk, restored them to the new server, and rebooted the machine;
however it does not look like the shares were restored. The folder do
not change to the "shared folder" icon and in the folder properties,
the shares do not appear.

I am backing up Windows 2000 registry files and restoring them on a new
Windows 2003 server. Is there any compatibility issues here? When I
restore them on the Windows 2003 machine, I don't get any errors and
all share keys seem to have been restored fine.

[Frances [MSFT]]

Hello David,

Thanks for the reply.

Please understand that the registry key is only used to restore the share
permissions. The original shares are not restored. You can restore the
files and directories from backup using Windows NT Backup (NTBACKUP.EXE),
or use scopy to copy the files.

The following two articles have sufficient information on it. I have
offered them before. Please take a close look at them.

Use NT backup
141589 How to Restore Share Definitions To Another Server
http://support.microsoft.com/?id=141589

Use Scopy
265704 How to Retain NTFS File and Share Permissions When You Move Files and
http://support.microsoft.com/?id=265704

Also, please make tests to confirm the situation since we can only give the
general information about it. Thank you for your understanding!

Best regards,

Frances He


Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security

=====================================================

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.

=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[srikanth_subrama]

Hi,
ShareEnum v1.6 helps in this. My colleague Vijaykumar Arumugham identified and we used. It does a neat job.

Below is the link to download it.

http://technet.microsoft.com/en-us/s.../bb897442.aspx

Srikanth S