Windows Forum

Ask something
Discussion Locked

Moving local to global groups??

0 helpful
7 replies

by stubby 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Under NT is there a simple way of transferring all the users of a local group to a global group and have the permissions either remain or be re-applied automatically?

7 replies

by stubby

Thanks, but I should have said that we've already worked out how to move the users between groups and that it was the permissions issue that was vexing us.

by haissam

You can do a bit of scripting to get the job done.

1- on the machine with the local group do
net localgroup %localgroupname% > localgroup.txt

this would put all the users in localgroupname into a text file

2- take the text file to a server

write a script that uses the 'for' command to add every user in the text file to the global group
the command to add the user is
net group %globalgroupname% %username% /add
with regards to the for command I'm afraid you have to check the help and get the correct format because it's quite an intricate command.

But I'm sure it would work

Regards,

Haissam

by stubby

This bit is done, perhaps I should have been more explicit as the real issue is how to get the permissions over from local to global without replacing them all individually.

by gadawg

Go to www.pedestalsoftware.com and download their 30 day trial of NTSec. It contains a neat utility called swapacl.exe which will replace or clone existing permissions for one user (or group) with those of another. Create your new group, populate it and then use this util to replace the permissions. EXTREMELY useful when you need it. This could also be used for those of you out there who hate the fact that you have group names on your NT4 servers whose name you cannot change. (NT won't allow a group name change). Hope this helps.

This discussion is closed to new replies.