Migrating local user profiles with ADMT

Discussion in 'Server Migration' started by MT, Jun 17, 2008.

  1. MT

    MT Guest

    I am performing a migration from one Windows 2003 Forest containing one
    domain to another Windows 2003 Forest containing one domain. (This is due to
    business restructuring). I am testing the migration using VMWare ESX server
    with both Forests on the same virtual switch. All the DCs are running Server
    2003 R2 SP2. The Domains and Forests are both running in Windows Server 2003
    operating mode.

    I am using ADMT 3 and the first few parts of the migration were successful,
    but I have had problems migrating the local user profiles. The current domain
    does not use roaming profiles, they are all local to the machine.

    Steps performed so far:
    1) Installed the DCs, File and Print server, Exchange and SQL server to
    mimic the existing domain.
    2) Installed the DCs for the new domain (I want to test the basic migration
    before I look at Exchange etc).
    3) Configured the OU structure, group policies, login scripts etc in both
    domains to mimic the old one.
    4) Created a two-way trust between the domains and turned off SID filtering
    in both directions with netdom.
    5) I have successfully migrated several groups.
    6) I have successfully migrated several user accounts, including their
    passwords.
    7) I have successfully migrated several workstation machines.

    However, I am having problems with the user profiles.

    The scenario is that I have a workstation that is a member of olddomain. I
    have logged into that computer as user1 who is a member of olddomain. When I
    look at the permissions on that profile in c:\documents and settings,
    has permissions.

    I then restart the machine so the user profile is not in use.
    I migrate the user account to newdomain.
    I migrate the computer account to newdomain. On the ‘translate objects’
    screen I chose to translate all options including user profiles.
    After the machine restarts, I log in as the local administrator (not the
    domain user) and check the permissions on the user profile in c:\documents
    and settings. It has changed from to

    Up until here, everything looks okay. Unfortunately, when I log into the PC
    as the domain user, and select the domain as newdomain, I receive a new user
    profile. i.e. I do not receive the settings from the old user profile, I
    receive a brand new profile. When I look in c:\documents and settings, I see
    2 relevant profiles - user1 and user1.newdomain (there is no user1.olddomain
    folder - before the migration, I would log in and receive the profile just
    called user1).

    I tried the process for a different workstation and user, thinking that I
    did something wrong. I migrated this second workstation this time choosing
    none of the options on the ‘translate objects’ screen. I did not log in as
    the second domain user, but tried security translation wizard before
    attempting login again.

    In ADMT, I ran the Security Translation Wizard for the second workstation. I
    chose to translate all options, including the user profile. Unfortunately
    when I logged in as user2 into newdomain, I again received a new profile.
    Again when I look in c:\documents and settings I see 2 relevant entries -
    user2 and user2.newdomain. The permissions on both are set to
    (the permissions do not mention ).

    Thank you for any help you can offer.
     
    MT, Jun 17, 2008
    #1
    1. Advertisements

  2. MT

    Morgan che Guest

    Hi,

    I built the similar environment and followed your steps to test the result.

    My environment is:

    Source domain: windows server 2000

    Target domain: windows server 2003

    Client: windows XP SP2

    I have successfully migrated user profile by security translation wizard.
    Here is little difference. I translate user profile before migrating
    workstation. Please migrate user profile before migrating workstation to
    test the result.

    If this problem still exist, please provide me the information below:

    1) After you migrate users with SID history to the new domain and logon to
    the new domain using this new user, please test if you can access the file
    resources in old domain?

    2)Please send me the log file under "Program files\ADMT\logs\Agent%" via
    .

    Thanks.

    Sincerely
    Morgan Che
    Microsoft Online Support
    Microsoft Global Technical Support Center

    Get Secure! - www.microsoft.com/security
    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.


    --------------------
    --->Thread-Topic: Migrating local user profiles with ADMT
    --->thread-index: AcjQWwpCXcGMDOM6T5imiGS8nyauUQ==
    --->X-WBNR-Posting-Host: 207.46.193.207
    --->From: =?Utf-8?B?TVQ=?= <>
    --->Subject: Migrating local user profiles with ADMT
    --->Date: Tue, 17 Jun 2008 02:18:01 -0700
    --->Lines: 62
    --->Message-ID: <>
    --->MIME-Version: 1.0
    --->Content-Type: text/plain;
    ---> charset="Utf-8"
    --->Content-Transfer-Encoding: 8bit
    --->X-Newsreader: Microsoft CDO for Windows 2000
    --->Content-Class: urn:content-classes:message
    --->Importance: normal
    --->Priority: normal
    --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
    --->Newsgroups: microsoft.public.windows.server.migration
    --->Path: TK2MSFTNGHUB02.phx.gbl
    --->Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.server.migration:3819
    --->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
    --->X-Tomcat-NG: microsoft.public.windows.server.migration
    --->
    --->I am performing a migration from one Windows 2003 Forest containing one
    --->domain to another Windows 2003 Forest containing one domain. (This is
    due to
    --->business restructuring). I am testing the migration using VMWare ESX
    server
    --->with both Forests on the same virtual switch. All the DCs are running
    Server
    --->2003 R2 SP2. The Domains and Forests are both running in Windows Server
    2003
    --->operating mode.
    --->
    --->I am using ADMT 3 and the first few parts of the migration were
    successful,
    --->but I have had problems migrating the local user profiles. The current
    domain
    --->does not use roaming profiles, they are all local to the machine.
    --->
    --->Steps performed so far:
    --->1) Installed the DCs, File and Print server, Exchange and SQL server to
    --->mimic the existing domain.
    --->2) Installed the DCs for the new domain (I want to test the basic
    migration
    --->before I look at Exchange etc).
    --->3) Configured the OU structure, group policies, login scripts etc in
    both
    --->domains to mimic the old one.
    --->4) Created a two-way trust between the domains and turned off SID
    filtering
    --->in both directions with netdom.
    --->5) I have successfully migrated several groups.
    --->6) I have successfully migrated several user accounts, including their
    --->passwords.
    --->7) I have successfully migrated several workstation machines.
    --->
    --->However, I am having problems with the user profiles.
    --->
    --->The scenario is that I have a workstation that is a member of
    olddomain. I
    --->have logged into that computer as user1 who is a member of olddomain.
    When I
    --->look at the permissions on that profile in c:\documents and settings,
    ---> has permissions.
    --->
    --->I then restart the machine so the user profile is not in use.
    --->I migrate the user account to newdomain.
    --->I migrate the computer account to newdomain. On the ‘translate
    objects’
    --->screen I chose to translate all options including user profiles.
    --->After the machine restarts, I log in as the local administrator (not
    the
    --->domain user) and check the permissions on the user profile in
    c:\documents
    --->and settings. It has changed from to

    --->
    --->Up until here, everything looks okay. Unfortunately, when I log into
    the PC
    --->as the domain user, and select the domain as newdomain, I receive a new
    user
    --->profile. i.e. I do not receive the settings from the old user profile,
    I
    --->receive a brand new profile. When I look in c:\documents and settings,
    I see
    --->2 relevant profiles - user1 and user1.newdomain (there is no
    user1.olddomain
    --->folder - before the migration, I would log in and receive the profile
    just
    --->called user1).
    --->
    --->I tried the process for a different workstation and user, thinking that
    I
    --->did something wrong. I migrated this second workstation this time
    choosing
    --->none of the options on the ‘translate objects’ screen. I did not
    log in as
    --->the second domain user, but tried security translation wizard before
    --->attempting login again.
    --->
    --->In ADMT, I ran the Security Translation Wizard for the second
    workstation. I
    --->chose to translate all options, including the user profile.
    Unfortunately
    --->when I logged in as user2 into newdomain, I again received a new
    profile.
    --->Again when I look in c:\documents and settings I see 2 relevant entries
    -
    --->user2 and user2.newdomain. The permissions on both are set to
    ---> (the permissions do not mention
    ).
    --->
    --->Thank you for any help you can offer.
    --->
     
    Morgan che, Jun 18, 2008
    #2
    1. Advertisements

  3. MT

    MT Guest

    Hi Morgan,

    Thank you for your reply. The problem no longer persists. I created a new
    virtual environment and followed my documented steps again and this time the
    user profiles migrated successfully.

    Sorry for any inconvenience - I was going to post in a few minutes, but you
    had already replied.
     
    MT, Jun 18, 2008
    #3
  4. MT

    Morgan che Guest

    Hi,

    Thanks for letting us know you have solved this issue. For any other
    question, if I could help, please feel free to post here.

    Have a nice day!

    Sincerely
    Morgan Che
    Microsoft Online Support
    Microsoft Global Technical Support Center

    Get Secure! - www.microsoft.com/security
    =====================================================
    When responding to posts, please "Reply to Group" via your newsreader so
    that others may learn and benefit from your issue.
    =====================================================
    This posting is provided "AS IS" with no warranties, and confers no rights.


    --------------------
    --->Thread-Topic: Migrating local user profiles with ADMT
    --->thread-index: AcjRNWN9DPSejHk4TkuoWyKb0bSCmw==
    --->X-WBNR-Posting-Host: 207.46.193.207
    --->From: =?Utf-8?B?TVQ=?= <>
    --->References: <>
    <>
    --->Subject: RE: Migrating local user profiles with ADMT
    --->Date: Wed, 18 Jun 2008 04:21:01 -0700
    --->Lines: 171
    --->Message-ID: <>
    --->MIME-Version: 1.0
    --->Content-Type: text/plain;
    ---> charset="Utf-8"
    --->Content-Transfer-Encoding: 8bit
    --->X-Newsreader: Microsoft CDO for Windows 2000
    --->Content-Class: urn:content-classes:message
    --->Importance: normal
    --->Priority: normal
    --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
    --->Newsgroups: microsoft.public.windows.server.migration
    --->Path: TK2MSFTNGHUB02.phx.gbl
    --->Xref: TK2MSFTNGHUB02.phx.gbl
    microsoft.public.windows.server.migration:3830
    --->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
    --->X-Tomcat-NG: microsoft.public.windows.server.migration
    --->
    --->Hi Morgan,
    --->
    --->Thank you for your reply. The problem no longer persists. I created a
    new
    --->virtual environment and followed my documented steps again and this
    time the
    --->user profiles migrated successfully.
    --->
    --->Sorry for any inconvenience - I was going to post in a few minutes, but
    you
    --->had already replied.
    --->
    --->"Morgan che(MSFT)" wrote:
    --->
    --->> Hi,
    --->>
    --->> I built the similar environment and followed your steps to test the
    result.
    --->>
    --->> My environment is:
    --->>
    --->> Source domain: windows server 2000
    --->>
    --->> Target domain: windows server 2003
    --->>
    --->> Client: windows XP SP2
    --->>
    --->> I have successfully migrated user profile by security translation
    wizard.
    --->> Here is little difference. I translate user profile before migrating
    --->> workstation. Please migrate user profile before migrating workstation
    to
    --->> test the result.
    --->>
    --->> If this problem still exist, please provide me the information below:
    --->>
    --->> 1) After you migrate users with SID history to the new domain and
    logon to
    --->> the new domain using this new user, please test if you can access the
    file
    --->> resources in old domain?
    --->>
    --->> 2)Please send me the log file under "Program files\ADMT\logs\Agent%"
    via
    --->> .
    --->>
    --->> Thanks.
    --->>
    --->> Sincerely
    --->> Morgan Che
    --->> Microsoft Online Support
    --->> Microsoft Global Technical Support Center
    --->>
    --->> Get Secure! - www.microsoft.com/security
    --->> =====================================================
    --->> When responding to posts, please "Reply to Group" via your newsreader
    so
    --->> that others may learn and benefit from your issue.
    --->> =====================================================
    --->> This posting is provided "AS IS" with no warranties, and confers no
    rights.
    --->>
    --->>
    --->> --------------------
    --->> --->Thread-Topic: Migrating local user profiles with ADMT
    --->> --->thread-index: AcjQWwpCXcGMDOM6T5imiGS8nyauUQ==
    --->> --->X-WBNR-Posting-Host: 207.46.193.207
    --->> --->From: =?Utf-8?B?TVQ=?= <>
    --->> --->Subject: Migrating local user profiles with ADMT
    --->> --->Date: Tue, 17 Jun 2008 02:18:01 -0700
    --->> --->Lines: 62
    --->> --->Message-ID: <>
    --->> --->MIME-Version: 1.0
    --->> --->Content-Type: text/plain;
    --->> ---> charset="Utf-8"
    --->> --->Content-Transfer-Encoding: 8bit
    --->> --->X-Newsreader: Microsoft CDO for Windows 2000
    --->> --->Content-Class: urn:content-classes:message
    --->> --->Importance: normal
    --->> --->Priority: normal
    --->> --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
    --->> --->Newsgroups: microsoft.public.windows.server.migration
    --->> --->Path: TK2MSFTNGHUB02.phx.gbl
    --->> --->Xref: TK2MSFTNGHUB02.phx.gbl
    --->> microsoft.public.windows.server.migration:3819
    --->> --->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
    --->> --->X-Tomcat-NG: microsoft.public.windows.server.migration
    --->> --->
    --->> --->I am performing a migration from one Windows 2003 Forest
    containing one
    --->> --->domain to another Windows 2003 Forest containing one domain.
    (This is
    --->> due to
    --->> --->business restructuring). I am testing the migration using VMWare
    ESX
    --->> server
    --->> --->with both Forests on the same virtual switch. All the DCs are
    running
    --->> Server
    --->> --->2003 R2 SP2. The Domains and Forests are both running in Windows
    Server
    --->> 2003
    --->> --->operating mode.
    --->> --->
    --->> --->I am using ADMT 3 and the first few parts of the migration were
    --->> successful,
    --->> --->but I have had problems migrating the local user profiles. The
    current
    --->> domain
    --->> --->does not use roaming profiles, they are all local to the machine.
    --->> --->
    --->> --->Steps performed so far:
    --->> --->1) Installed the DCs, File and Print server, Exchange and SQL
    server to
    --->> --->mimic the existing domain.
    --->> --->2) Installed the DCs for the new domain (I want to test the basic
    --->> migration
    --->> --->before I look at Exchange etc).
    --->> --->3) Configured the OU structure, group policies, login scripts etc
    in
    --->> both
    --->> --->domains to mimic the old one.
    --->> --->4) Created a two-way trust between the domains and turned off SID
    --->> filtering
    --->> --->in both directions with netdom.
    --->> --->5) I have successfully migrated several groups.
    --->> --->6) I have successfully migrated several user accounts, including
    their
    --->> --->passwords.
    --->> --->7) I have successfully migrated several workstation machines.
    --->> --->
    --->> --->However, I am having problems with the user profiles.
    --->> --->
    --->> --->The scenario is that I have a workstation that is a member of
    --->> olddomain. I
    --->> --->have logged into that computer as user1 who is a member of
    olddomain.
    --->> When I
    --->> --->look at the permissions on that profile in c:\documents and
    settings,
    --->> ---> has permissions.
    --->> --->
    --->> --->I then restart the machine so the user profile is not in use.
    --->> --->I migrate the user account to newdomain.
    --->> --->I migrate the computer account to newdomain. On the
    ‘translate
    --->> objects’
    --->> --->screen I chose to translate all options including user profiles.
    --->> --->After the machine restarts, I log in as the local administrator
    (not
    --->> the
    --->> --->domain user) and check the permissions on the user profile in
    --->> c:\documents
    --->> --->and settings. It has changed from to
    --->>
    --->> --->
    --->> --->Up until here, everything looks okay. Unfortunately, when I log
    into
    --->> the PC
    --->> --->as the domain user, and select the domain as newdomain, I receive
    a new
    --->> user
    --->> --->profile. i.e. I do not receive the settings from the old user
    profile,
    --->> I
    --->> --->receive a brand new profile. When I look in c:\documents and
    settings,
    --->> I see
    --->> --->2 relevant profiles - user1 and user1.newdomain (there is no
    --->> user1.olddomain
    --->> --->folder - before the migration, I would log in and receive the
    profile
    --->> just
    --->> --->called user1).
    --->> --->
    --->> --->I tried the process for a different workstation and user,
    thinking that
    --->> I
    --->> --->did something wrong. I migrated this second workstation this time
    --->> choosing
    --->> --->none of the options on the ‘translate objects’
    screen. I did not
    --->> log in as
    --->> --->the second domain user, but tried security translation wizard
    before
    --->> --->attempting login again.
    --->> --->
    --->> --->In ADMT, I ran the Security Translation Wizard for the second
    --->> workstation. I
    --->> --->chose to translate all options, including the user profile.
    --->> Unfortunately
    --->> --->when I logged in as user2 into newdomain, I again received a new
    --->> profile.
    --->> --->Again when I look in c:\documents and settings I see 2 relevant
    entries
    --->> -
    --->> --->user2 and user2.newdomain. The permissions on both are set to
    --->> ---> (the permissions do not mention
    --->> ).
    --->> --->
    --->> --->Thank you for any help you can offer.
    --->> --->
    --->>
    --->>
    --->
     
    Morgan che, Jun 19, 2008
    #4
  5. MT

    iye reyes Guest

    Hi,

    I am doing a similar project right now and I am having the same problem with the user profiles. It would really be nice if you could share a copy of your documented steps. I hope it's okay. thanks...


    iye
     
    iye reyes, Jul 9, 2008
    #5

  6. Hi there - you've replied to a thread no longer on the news server.
    Please use an NNTP client to access msnews.microsoft.com instead of
    Techarena or any of the various web forums that copy threads from
    these servers. Also remember to post new questions as new messages,
    providing all relevant detail (such as version numbers etc) so we can
    help you - best not to do "me too" posts.
     
    Lanwench [MVP - Exchange], Dec 23, 2009
    #6
  7. "Lanwench [MVP - Exchange]"

    Is that what they area called, "me too" posts? :)

    I know what you mean, Lanwench. When I see these broken, expired threads,
    it's frustrating to try to help, because we can't see what they are replying
    to in the original newsgroups where they came from but have been long
    expired past their 90 day lifetime limit at their point of origin (which is
    NOT techarena).


    --
    Ace

    This posting is provided "AS-IS" with no warranties or guarantees and
    confers no rights.

    Please reply back to the newsgroup or forum for collaboration benefit among
    responding engineers, and to help others benefit from your resolution.

    Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
    2003/2000, MCSA Messaging 2003
    Microsoft Certified Trainer

    For urgent issues, please contact Microsoft PSS directly. Please check
    http://support.microsoft.com for regional support phone numbers.
     
    Ace Fekay [MCT], Dec 24, 2009
    #7
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.