Can I merge ACLs if the target account already has some rights? (NETIQKB12500)

  • 7712500
  • 02-Feb-2007
  • 17-Apr-2008

Resolution

goal
Can I merge ACLs if the target account already has some rights?

fact
Domain Migration Administrator 7.1

fix
DMA can merge source and target account permissions. When you translate security in 'Replace' mode, the result will be the target account having both the source accounts permissions and the target account permissions. For example if Source\UserA has read and Target\UserA has Write, after translation Target\UserA will have Read + Write.

note
If you translate security in 'Add' mode, the first security translation will add the target account to the ACL and add the permissions of the source account to the target account.  The second security translation, if done in Add mode, will not change the permissions if the target account already exists on the ACL.

Additional Information

Formerly known as NETIQKB12500