I'm trying to figure out, just so I have a better understanding of how it
actually works, how the moveuser tool actually does it's job. All I've
really been able to piece together on my own through observing the changes
is that it removes the local account from the associated profile directory
permissions while adding the domain account, changes the permissions in the
ntuser.dat hive, and changes the SID for the associated account(both the SID
reg_binary subkey and the string SID "folder/container" key). Past that I
can't really see what, if any, changes it makes. Can anyone shed some light
on this for me? A couple days of googling and asking around has turned up
nothing.
Thanks,
Brandon
|