Subinacl.exe is a program that can do wonders for you.
We are in the process of migrating data from a nt4 member server to a W2K member server where security is handled via member server local groups.
We robo copied the data using "/sec" to the new W2K server. The result is that the file and directory ACLs referenced the SIDs of the groups from the NT4 local groups.
We created new groups on the W2K server using my GpMaint and populated them with the master domain accounts.
Subinacl to replace the NT4 server SIDs with the SIDs of the W2K server groups.
