2

After having two separate companies merge into one, we were left with two existing environments, a Novell environment, and an Active Directory environment. Prior administration decided not to merge them, and instead maintain both environments separately, making duplicate users, one in Novell to access those directories, and one in Active Directory, to grant access to those network shares and company e-mail.

Current administration is ready to phase out the increasingly ancient Novell servers, so we are preparing to migrate the Novell data to our existing Active Directory structure.

My concern right now is that we need to have permissions match up to a folder level extent (we're not worried about granular file permissions), but if we run MSDSS for the files only, we will need to go back and manually grant permissions. However, if we run MSDSS to totally merge NetWare Admin and ADUC, the user Jane Doe will end up with 2 ADUC accounts, her original ADUC of Jane.Doe and now an additional that would come from Novell, JaneD.

My question is: Is there a way for MSDSS to look at the information for JaneD and see that it matches a user account in ADUC, and decline to create a new account, but apply the permissions JaneD has to the migrated Novell-to-Windows data sets?

Sarah Sanderson
  • 51
  • 8

1 Answers1

0

So your users already have accounts in both Novell and AD? If so, I wouldn't worry about using a migration tool.

Instead, create a CSV file that maps your Novell users to your AD users. Storing the Novell username in an attribute on the corresponding AD user account is also a good idea. If you create the CSV file first, you could use PowerShell to easily set the AD attribute.

When you get to moving the files, I would use something like RoboCopy to do the actual copy. Then use Novell utilities to dump the explicit file and folder permissions to a text file. Using the CSV file with the username map, you can use PowerShell to translate the Novell permissions to the equivalent Windows permissions. And finally use PowerShell to apply those permissions.

longneck
  • 23,272