Looking for a bit of clarification on using Subinacl. I have a fileserver running Windows 2000 server that is installed that has permissions on shared files assigned at the NTFS level using machine local groups, which in turn contain domain groups/USers. We're replacing the machine with a Windows 2003 server, and I need to copy all the files to the new server, and retain the permissions, which I realise I can't do with machine local groups. Now we have copied all the data through RObocopy but I think it doesnt move local groups permissions. I believe the best thing to do will be to use SubinAcl to replace the permissions that use machine local groups with the same permissions using domain local groups, so a folder that has: MACHINE\Administrators MACHINE\Group 1 MACHINE\Group 2 permissions would have: MACHINE\Administrators DOMAIN\Group 1 DOMAIN\Group 2 permissions on it. I'd appreciate some advice on the simplest way to achieve this, We're talking approx 200gb and hundreds of thousands of files so it needs to be as programatic as possible, i.e start at a top level and have it recurse. THANKS & REGARDS ABHINAVABHINAV