There are a couple of utilities right in the NT Resource Kit....Robocopy and Scopy. Both will move files and retain security settings.
per Microsoft:
Scopy's limitations make the utility ill-suited for use with NTFS-based files on file serversor other mission-critical systems. Scopy lacks logging features and is occasionally unreliable during copy operations. For example, Scopy sometimes skips files for no apparent reason and without an accompanying error message. You can work around theutility's lack of logging features by piping the command's output to a text file: Simply place an output redirection symbol and filename at the end of the command line, such as:
scopy *.* D:\ >
Alternatively, you can use the resource kit's Robocopy utility for individual copy and move operations or for ongoing directory replication. Like Scopy, Robocopy supports the preservation of NTFS permissions, auditing, and ownership information during copy and move operations (i.e., if you run it with the /sec switch). The utility also offers several other useful features, such as the abilities to mirror entire directory structures, seed directory structures on a target drive without copying files, exclude files that meet certaincriteria, and restart aborted copy operations at the point of failure. You can use the At command (or Task Scheduler, depending on your NT service pack level) to schedule Robocopy to perform particular file-copy or directory-mirroring tasks at various time intervals during the day. Because Robocopy provides superior flexibility and efficiency, you might even consider using Robocopy in lieu of NT's built-in directory-replication service for intraserver replication of the Netlogon folder's contents.
Hope this helps!