Sysadmin

This is an automated archive.

The original was posted on /r/sysadmin by /u/bravid98 on 2024-01-22 22:54:28+00:00.

We have shifted our file shares to Azure Files and we're using Entra DS for permissions. We moved files with the Mover and it brought over all our permissions from on prem which have been synced into DS. This work great, no issues.

However, the vast majority of groups are from AD sync and our next step is to shut down our onprem DCs where these are coming from.

I would like to find or write a script that reads all permissions and matches the old group to a new group so we can cleanly cut over. We've got hundreds of groups and inherited and uninherited permissions all over the place, so it's not a simple matter of just changing root folders.

Has anyone tackled this before? Are we going about this the right way?