gpresland's questions

I have a folder in a shared network path which I want used as a template -- It contains many subfolders with naming conventions. This folder is meant for users to copy, and then rename their newly created copy.

What I do not want is a user renaming my template folder. Thus, I want to deny the permission to rename the folder.

It was my understanding that to deny renaming you simply had to deny the delete permissions; but this appears to be incorrect.

I am not the owner of the folder, the folder is set to Read-only, and I am STILL able to rename with the follow permissions:

• Traverse folder / execute file
• List folder / read data
• Read attributes
• Read extended attributes
• Read permissions

What permissions must I remove, or what can I do to prevent the folder from being renamed so that users may only look at the folder and copy it?

I am looking at doing a cross forest AD migration from SBS 2003 to SBS 2011. I have a new server that runs SBS 2011 with a new domain name and am looking at moving all the user profiles from say old.local to new.local.

There's only around 12 users so this is not a big move.

I was going forward with using ADMT, and upon setting up trusts between SBS 2003's forest and SBS 2011's forest I found out SBS 2003 does not support trusts with other domains. It therefore appears I cannot use ADMT as it tells me "ADMT is unable to connect to domain controller" "Access is denied. (0x80070005)" which I believe is due to cross forest trusts.

The reason I wanted to migrate AD was that I was under the assumption with migrating AD I can preserve the user's SIDs and therefore when they log on their PC in a new domain they will use the same user profile on the PC after a domain change. All of their Desktop/Documents/Settings/Etc will not have to be copied between profiles under C:\Users. I also don't like having profiles names under C:\Users\ such as 'account' and 'account.new' which you get when a users logs in with the same account name but new SID to my understanding.

I only need to copy users as the Security Groups have been completely redone, and Exchange mailboxes I can do manually between the servers with export/import (unless there's a faster way).

Is it possible for me to migrate all the users between the servers? Or should I simply recreate the user accounts on the new server and manually copy their profiles at all of their desktops?

Setting up a new Windows SBS 2011 machine and notice the startup "Windows Small Business Server 2011 Standard Console" which is full of wizards making things simple. Under "Users and Groups" it shows a list of Security Groups.

When I add a Security Group through Active Directory Users and Computers, it will not appear on the "Standard Console" page with Wizards that loads on login.

When I make the Security Group with the "Standard Console", it appears in both the "Standard Console", and under Active Directory Users and Computers.

When loading a Security Group to make changes to it through the "Standard Console", it also hangs for several seconds before loading. Under Active Directory Users and Computers, it's near instant.

My question is, is there any difference between the two? Is there a specific method I should be using? I don't understand why they would appear the way they do depending on what method they are entered in.