This is the form filled out (by IT staff) for every unit in Engineering well prior to migration. It really helped keep everything in line and we had very few permissions problems after migrating, mostly due to broken inheritance on shares. Home directories were repermissioned by script because they were easy–UIUC\user became UOFI\user. For our units, we changed nearly every group name to make them consistent so a script was going to be something of a pain. The units also either had few enough shares doing it by hand was just as easy as trying to script, or they were big enough that an audit on the permissions was not a bad thing.