Save and Restore NTFS permissions using ICACLS

So you need to make a big NTFS rights change. Well before changing anything do you have a good backup of the old permissions?
Most people will say I got a backup. But restoring the backup will take much longer than restoring just the permissions.

So how do I make a backup of the NTFS permissions?

[Read more…]

NetBIOS vs FQDN server names

Why should I really think twice before using a single NetBIOS name in a path.. Using NetBIOS names is a relic from old times. Today we have the possibility of using fdqn and I believe doing anything else is a bad idea. So why fqdn when netbios is so much shorter. Well your company buys the competitor and both have a fileserver called \fileservercommon. This requires you to handle it directly if you had used fqdn you would have \fileserver.ourcompany and \fileserver.othercompany. So It gives us the possibility of merging with other companies with less problems.

[Read more…]

My best practices for sharing

These are some things I do think about when helping a customer with their shares:

Backups, The shares, Formating, Previous versions. [Read more…]

Find granted rights in a directory structure


A long long long time ago I needed to find all rights that were set. So I wrote a script that lets me pipe the information to a CSV file.

There is a similar tool from Sysinternals called Access Enum, but:

  1. It outputs a txt file that is harder to work with afterwords.
  2. I didnt think of it when I needed it done.

So grab it from the Technet Gallery page.



DFS Consolidation root

Why a DFS Consolidation root?

DFS Consolidation roots are a way geting rid of old servers while keeping the name functionality of the old servers.

Consider the company Acme Computing. They are an old company with lots of old file server all over the place. New IT management has decided that all shared data should be available on the same file server. So this is kind of easy, lets just copy all the data to the new server, but wait.. There are old systems that have hardcoded paths to the old servername, this would break them. Some people might suggest just inheriting the share names and add the old names as alternative names of the server. This might work with the smaller companies but all you have done is complicated the fileserver even more. If we look at DFS, we can use an DFS consolidation root to trick the systems that the old paths are alive too. You cant configure a domainbased DFS namespace as a Consolidation root only standalone roots.

What happens (simplified)?

[Read more…]