HPE 3PAR StoreServ Storage
1748134 Members
3519 Online
108758 Solutions
New Discussion

HP 3Par 8200 File Persona - robocopy/emcopy, NTFS permissions not set correctly and wrong SIDs

 
d_oberhofer
Collector

HP 3Par 8200 File Persona - robocopy/emcopy, NTFS permissions not set correctly and wrong SIDs

I'm currently migrating data from a EMC VNX5500 storage array to our new HP 3Par 8200.

After a few tests, I'm having lots of issues with the NTFS permissions which are a mess on the destination (3Par Virtual File Server).
The files and directories have wrong SIDs, for example: the source folder has a group named "HelpDesk" and the destination folder has a user named "HelpDesk2" (which exists and is a Exchange shared mailbox item).

How is something like this possible? Am I missing some Active Directory parameters to set on the virtual file server?
Is the virtual file server reading the wrong SIDs from the Active Directory?



I used the following robocopy/emcopy settings (I tested a lot more cmd switches, but these seemed the most reasonable):

emcopy64.exe SRC DST /ignoredhsm /o /i /s /de /c /purge /secforce /r:1 /w:1 /log C:\Scripts\NASmigration\emcopy_log.txt

robocopy SRC DST /MIR /COPYALL /NP /NFL /NDL /R:1 /W:1 /MT:16 /LOG+:c:\Scripts\NASmigration\robocopy.log

Here is the output from the powershell command Get-Acl on the SRC folder:

PS C:\Users\administrator.DOMAIN> Get-Acl \\NAS\HelpDesk\hp|format-list

Path   : Microsoft.PowerShell.Core\FileSystem::\\NAS\HelpDesk\hp
Owner  : BUILTIN\Administrators
Group  : DOMAIN\Domain Admins
Access : DOMAIN\Domain Admins Allow  FullControl
         DOMAIN\HelpDesk Allow  DeleteSubdirectoriesAndFiles, Modify, Synchronize
Audit  :
Sddl   : O:BAG:DAD:AI(A;OICIID;FA;;;DA)(A;OICIID;0x1301ff;;;S-1-5-21-685978082-878250914-626671869-22239)

Output from DST folder:

PS C:\Users\administrator.DOMAIN> Get-Acl "\\VFS\c$\fs_2\HelpDesk\HP"|format-list


Path   : Microsoft.PowerShell.Core\FileSystem::\\VFS\c$\fs_2\HelpDesk\HP
Owner  : O:S-1-5-21-2939883670-2756317086-2981498005-500
Group  : DOMAIN\Domain Admins
Access : DOMAIN\Domain Admins Allow  FullControl
         DOMAIN\helpdesk1 Allow  DeleteSubdirectoriesAndFiles, Modify, Synchronize
Audit  :
Sddl   : O:S-1-5-21-2939883670-2756317086-2981498005-500G:DAD:(A;OICIID;FA;;;DA)(A;OICIID;0x1301ff;;;S-1-5-21-685978082
         -878250914-626671869-21929)



Our File Persona is correctly joined with our Windows 2012 R2 domain (computer items exist for both nodes).
The file server reads also the Active Directory users and groups correctly (tried with settings quotas on the virtual file server)
Here's the output from the 3Par CLI for the command showfs and showfs -ad:

8200_MAIN cli% showfs
Node FSNode State   Active InCluster ----Version----- ---N:S:P--- BondMode  MTU
   0 Yes    Running No     Yes       1.1.1.1-20150828 0:2:1,0:2:2        6 1500
   1 Yes    Running Yes    Yes       1.1.1.1-20150828 1:2:1,1:2:2        6 1500
-------------------------------------------------------------------------------
   2 total                                                                    

8200_MAIN cli% showfs -ad
Domain Name  : IT.COMPANY.COM
NetBIOS Name : ROME
Forest       : it.company.com
Status       : Online

8200_MAIN cli% showversion
Release version 3.2.2
Patches:  P03,P04,P05

Component Name                   Version                         
CLI Server                       3.2.2                           
CLI Client                       3.2.2                           
System Manager                   3.2.2                           
Kernel                           3.2.2                           
TPD Kernel Code                  3.2.2 (P03)  

Can somebody help me with this issue? I tried also other copying tool like Richcopy and Total commander with the same results.

Thanks in advance