As I said, SubInACL can process the internal ACLs. You will have to load the user hives and all will be good. I have processed thousands of computers from OLD SIDs to New SIDS for domain migrations where we have issued new accounts to acquisitions (NT4 to NT4 and NT4 to W2K).
[ 22. April 2003, 22:11: Message edited by: Howard Bullock ]
