Using Veeam to Restore shares to new server, new domain

Availability for the Always-On Enterprise

Using Veeam to Restore shares to new server, new domain

Veeam Logoby benbour » Wed Jul 12, 2017 1:57 pm

Hey there.

Not sure if anyone here can help since this isn't so much of a Veeam problem, as a Microsoft problem, but what the heck - here's the scenario:

Brand new domain is lying in wait, I have a new file server ready to go on new domain with root shares set up the same (3 mapped drives for users via gpo-General,Home,Apps)

From my Veeam backup server, I am able to copy folders and permissions from current file server to new one.

So obviously when this is done, the permissions stay but the new FS can't associate a user account with the SID, just it shows up as an unknown account.

All user accounts have been created on the new domain and match the current one

Creating a trust is not an option. I'm not sure if subinacl can work in this particular scenario?

I don't believe Veeam is capable of copying permissions and swapping from one domain to another, not that I would expect it to. But it would be much easier to find a way to make this work instead of replicating it all manually.
benbour
Enthusiast
 
Posts: 33
Liked: 2 times
Joined: Tue May 05, 2015 9:48 pm
Full Name: Ben Bourcier

Re: Using Veeam to Restore shares to new server, new domain

Veeam Logoby foggy » Wed Jul 12, 2017 5:39 pm

Hi Ben, I'm not sure how are you actually copying files/permissions - are you using FLR to restore permissions or just copy files using file copy jobs/Files node?
foggy
Veeam Software
 
Posts: 14907
Liked: 1096 times
Joined: Mon Jul 11, 2011 10:22 am
Full Name: Alexander Fogelson

Re: Using Veeam to Restore shares to new server, new domain

Veeam Logoby benbour » Wed Jul 12, 2017 7:03 pm

Yeah I'm using the file level restore, checking off keep permissions, and having Veeam copy to new location.
benbour
Enthusiast
 
Posts: 33
Liked: 2 times
Joined: Tue May 05, 2015 9:48 pm
Full Name: Ben Bourcier

Re: Using Veeam to Restore shares to new server, new domain

Veeam Logoby Mike Resseler » Thu Jul 13, 2017 5:48 am

Ben,

You are correct in stating that Veeam can't copy and swap permissions from one domain to another. And I am afraid that in your scenario, you will need to redo the ACL (PS: gives you the possibility to do a clean new job and completely organize your ACL with security groups only... I have done this twice in the past for companies as a consultant with much better results afterwards, less support calls even if it took some time to get that running). Another method I have used (but even longer ago) was to migrate accounts from one domain to another with the option to keep the SID (I used ADMT for it, not sure if this is still valid today). In that case it won't form a problem

My 2 cents
Mike
Mike Resseler
Veeam Software
 
Posts: 3291
Liked: 366 times
Joined: Fri Feb 08, 2013 3:08 pm
Location: Belgium, the land of the fries, the beer, the chocolate and the diamonds...
Full Name: Mike Resseler

Re: Using Veeam to Restore shares to new server, new domain

Veeam Logoby benbour » Thu Jul 13, 2017 1:42 pm

Thanks for the replies. I was afraid of that haha. I guess in the long run it is the best option to get everything organized, just a good amount of work right off the hop, pair that with the fact that our entire organization is moving to a new location that coincides with the new domain switch-over.
benbour
Enthusiast
 
Posts: 33
Liked: 2 times
Joined: Tue May 05, 2015 9:48 pm
Full Name: Ben Bourcier


Return to Veeam Backup & Replication



Who is online

Users browsing this forum: Bing [Bot], Google [Bot], jpdusty, mdinwoodie, NightBird and 78 guests