Preserving NTFS ACLs when copying a VOB or view storage directory

Whenever you copy a VOB or view storage directory to another location in an NTFS volume or to another NTFS volume, you must use a copy program that preserves the storage directory ACLs.

Note: When moving Windows VOBs to a NAS device, you must either remove the network group from the ACLs before moving the VOB, or remove the "NETWORK deny write" permission after the VOBs have been moved.

In most cases, you can use the ccopy utility (versionvault-home-dir\etc\utils\ccopy) when copying a VOB or view storage directory. Although ccopy copies all necessary ACL information, it does not copy the full security descriptor of an object, and therefore effectively grants the user who runs it full access to the copied directory. If someone other than the VOB or view owner is copying a VOB or view storage directory, it may be more appropriate to use xcopy /o /k instead, though the copied directory may inherit some entries from the ACL of its parent directory, which can cause problems with VOB and view access.

Note: When using xcopy, you must supply any additional options required to copy subdirectories, and you must be logged on as a user with rights to create the directory and set the ACLs on the target host. The administrators and Backup Operators groups typically have these rights.

After you copy the VOB or view storage directory, run fix_prot –root –recover to check the ACLs on the target directory. If the command fix_prot –root –recover shows any errors, follow the procedures in Fixing protection problems to correct them.