When the client devices already are joined to the target domain. In the situation when clients are pushed into BT to have them in the database. Then re-acl just works fine.
In this situation you cannot do a cutover for the client without configuring/executing domain re-join.
解决办法
You can make a copy of the cutover action and remove the portions that do the device unjoin/rejoin.
Perform Setup
Create DirSync Profile to read Computers from the Target
Run PUSH to read into SQL Confirm target device is read in
Make a Copy of the system default Cutover Action and modify as follows
Give the Action a unique name like “Convert Win10 Profile” Select an Action activity type of “ReACL” Remove BT-Cutover Task from new Action Add BT-Logoff Sessions Task to new Action
Perform ReACL and Profile Conversion Run normal ReACL This provides early awareness of any files/folders/reg keys that might need to be excluded from the ReACL profile Run Custom Action to Convert Win10Profile