vmover.exe is mainly performing several operations, depending on vmover.ini file header flags.
For example: Clone=Yes means that resource will be dual-ACL'ed. Dual-ACL basically means that vmover will apply target domain SID in NTFS permissions if source domain SID was found in those permissions. Also, source SID will no be removed.
If Clone was set to no, then source domain SID will be replaced with target domain SID.
Another example: Undo=Yes will make vmover to perform a "Revert" operation, restoring source domain SIDs and removing target one from permissions.
So when vmover is processing files/folder/registry/etc, the following will happen:
Note: it doesn't matter what is the name, UPN or any other resolved value is shown in permissions. For vmover to work with the said resource, only SID will be used. vmover also doesn't validate if the target domain SID is proper or not. Once the source value matches, target domain SID+RID will be applied.
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center