ADMT and Local Profiles

Discussion in 'Server Migration' started by Brandon, Aug 21, 2004.

  1. Brandon

    Brandon Guest

    I have read through many group listings and have found people with similar
    problems to what I am experiencing, but nothing seems to help.

    - I have an NT 4 domain trusted to a 2k3 domain.
    - User profiles have been migrated to an OU structure
    - Exchange mailboxes have been moved to new domain/exchange server

    Now I am left with about 120 Win2k+ machines that are still being logged
    into the NT 4 domain and are joined as well.

    I ran a test on a machine to see about migrating the computer which runs
    "successfully". I go to log into the computer and of course creates a new
    profile on the local machine. So I did the following:
    1. Rejoined the machine to the NT 4 domain
    2. Rebooted
    3. Changed the SID in the registry to point to the profile I want to keep
    4. Deleted the newly created SID
    5. Rebooted
    6. Ran the Computer Migration Wizard
    7. Checked the logs and see that it completed "Successfully", no errors, and
    nothing seemed to be copied.
    8. When I log in, I get a new profile

    I think I've gone through these steps 10 times, trying something a little
    different each time and produce the same results each time.

    I do know that I can:
    1. Join the PC to the new domain
    2. Log into the new domain
    3. Reboot
    4. Set the SID for the new profile to point to the old profile thus
    accomplishing what I want to do.
    This however, in some cases can take me 20 minutes which is very
    discouraging when I see that I have 119 more to do!

    I am, to say the least, puzzled as to how to get the ADMT tool to work for
    this task.
     
    Brandon, Aug 21, 2004
    #1
    1. Advertisements

  2. Brandon

    Michael Bell Guest

    After you run the migration wizard to move the machine into the new 2003
    domain, run the Security Translation wizard. This will update the profile to
    the new domain.
     
    Michael Bell, Aug 22, 2004
    #2
    1. Advertisements

  3. Hi Brandon,

    Thanks for your posting here.

    Michael's suggestion is right. We can use ADMT to migrate the computer
    account with User profile or run Security Translation Wizard to ensure that
    the new account has the same set of local rights to the member server that
    the original account did.

    You need to perform Security Translation before your logging on that
    client. Or the new profile will be created for the target domain user.

    Reference:

    Domain Migration Cookbook
    http://www.microsoft.com/technet/prodtechnol/windows2000serv/deploy/cookbook
    /default.mspx

    Regards,
    Bob Qin
    Microsoft Online Partner Support

    Get Secure! - www.microsoft.com/security

    ====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    ====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.

    --------------------
    From: "=?Utf-8?B?QnJhbmRvbg==?=" <>
    Subject: ADMT and Local Profiles
    Date: Sat, 21 Aug 2004 11:39:02 -0700
    Newsgroups: microsoft.public.windows.server.migration

    I have read through many group listings and have found people with
    similar
    problems to what I am experiencing, but nothing seems to help.

    - I have an NT 4 domain trusted to a 2k3 domain.
    - User profiles have been migrated to an OU structure
    - Exchange mailboxes have been moved to new domain/exchange server

    Now I am left with about 120 Win2k+ machines that are still being
    logged
    into the NT 4 domain and are joined as well.

    I ran a test on a machine to see about migrating the computer which
    runs
    "successfully". I go to log into the computer and of course creates
    a new
    profile on the local machine. So I did the following:
    1. Rejoined the machine to the NT 4 domain
    2. Rebooted
    3. Changed the SID in the registry to point to the profile I want to
    keep
    4. Deleted the newly created SID
    5. Rebooted
    6. Ran the Computer Migration Wizard
    7. Checked the logs and see that it completed "Successfully", no
    errors, and
    nothing seemed to be copied.
    8. When I log in, I get a new profile

    I think I've gone through these steps 10 times, trying something a
    little
    different each time and produce the same results each time.

    I do know that I can:
    1. Join the PC to the new domain
    2. Log into the new domain
    3. Reboot
    4. Set the SID for the new profile to point to the old profile thus
    accomplishing what I want to do.
    This however, in some cases can take me 20 minutes which is very
    discouraging when I see that I have 119 more to do!

    I am, to say the least, puzzled as to how to get the ADMT tool to
    work for
    this task.
     
    Bob Qin [MSFT], Aug 23, 2004
    #3
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.