Contact Sales

To contact our sales team, you can use the form below. Do not use this form for tickets or help desk, click here to create a ticket.

Synchronise and migrate users and workstation between on-prem AD, Entra ID, Google the easy way. Seamlessly Move devices between AD Joined, Hybrid and Entra Joined.
  • Create ticket
  • Home
  • Migration Agent

How to configure a Repermission (ReACL) only runbook for coexistence

Written by Trevor Taegder

Updated at June 30th, 2026

Contact Sales

To contact our sales team, you can use the form below. Do not use this form for tickets or help desk, click here to create a ticket.

  • Getting Started
  • FAQs
  • API Documentation
  • Integrations
  • Migration Agent
  • Directory Synchronisation
  • Remote DC agent
  • Remote Password Sync Agent
  • Install and Configure
  • Support
  • Complex Expressions
+ More

Table of Contents

Note:

In some migration scenarios, it may make sense to “dual ACL” file servers so that both unmigrated source users and migrated target users have access to server resources during a phased migration. This purpose of this article is to walkthrough the configuration of such a Repermission (ReACL) only Runbook in PowerSyncPro.

1.) Create a new Runbook

2.) Select the Source and Target Directories

3.) In most cases, a Repermission (ReACL) only Runbook will be run on file servers, so you will likely need to enable “Allow on server OS”.

4.) On the Startup tab, select the following settings: 

Silent Mode 

Do Not Run Startup 

5.) Skip the User Experience tab

6.) On the Device State tab, ensure the following default settings remain intact:

Remove From: None

Domain Join: None

7.) On the Permission Updates tab, select “Only add permissions”.

8.) Select the type of permissions you want to have “dual ACLed”. Only the following options are valid for the “Only add permissions” operation:

File System

File Shares

Printers

Remote File Shares

Note:

Only the options listed above are valid for “Only add permissions” or “dual ACL” coexistence scenarios. Other options could cause device reboots or other unexpected results. As always, we would recommend testing your Runbook configuration on test devices extensively before implementing in production.

 

 

9.) The App Reconfiguration tab should remain with the default settings, “Don't reconfigure applications”.

10.) On the Completion tab, select “Do Not Run Completion”.

11.) Click Save.

12.) Navigate to Batches and Create a Batch.

13.) Assign a Name, select the Source and Target directories

13.) Click Add to add your newly created ReACL only Runbook.

14.) Select the date and time that you want this Runbook to start. If you want it to run as soon as possible, then schedule it in the past. If you want this Runbook to run on several file servers across the globe simultaneously, then select UTC time. Otherwise, to schedule the file servers to process the Runbook using their local time zone, select Local.

15.) Add servers to the Batch.

runbook reacl

Was this article helpful?

Yes
No
Give feedback about this article

Related Articles

  • Repermission of AppX Packages
  • Entra ID Users Cannot Log On Locally After AD-to-Entra Migration
  • How-To Migrate Workgroup Joined Endpoints to AD / Entra

Subscribe to Newsletter

Drop your email in the box below to sign up. We promise to keep our updates relevant and useful – and we’ll never share your details.

PowerSyncPro's logo

PowerSyncPro is the ultimate product for easing the pain and frustration during mergers, acquisitions, divestitures, and consolidations.

Terms & Conditions

  • FAQs
  • Privacy Policy
  • Cookies
  • Anti Slavery Notice

PowerSyncPro

  • Case Studies
  • Contact sales
  • Marketplace
  • EULA

Get Connected

Room 73, Wrest House, Wrest Park, Silsoe, Bedford, England, MK45 4HR
info@powersyncpro.com

Twitter Youtube Linkedin

Expand