Return
-
Title
Issues re-ACL'ing NAS folder where Folder is Skipped: "Security descriptor is already up to date" -
Description
When attempting to reACL a share folder with AD Pro we note the following entries within the logs:
Skipping item '\\drive-share\xxxx\xxx1\..'
followed by:
Security descriptor is already up to date: 'Source SID:Target SID'
-
Cause
This is due to missing SID History on the shared folder (object being reACL'ed)The Dirsync Pro logs may show the following error:"The source and destination must be of the same type"For this issue the source group type differed from the target group type there fore the target DC was not able to copy in the ACLs as expected. -
Resolution
Set the proper group type in the source environment to match the group in target environment to allow for the SIDs to copy over successfully.