Link to home
Start Free TrialLog in
Avatar of theruck
theruckFlag for Slovakia

asked on

Migrating user profiles between domains

Helo,
I have a windows 2000 domain called "dom1.com" with 30 workstations.
I need to migrate all the users to another domain called "dom2.com" while the user profiles on their workstations will remain. They use outlook express as their e-mail clients.

Is there any way how to migrate it or do i have to copy them manually?
Avatar of Nirmal Sharma
Nirmal Sharma
Flag of United States of America image

ASKER CERTIFIED SOLUTION
Avatar of Nirmal Sharma
Nirmal Sharma
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of Abgraal
Abgraal

Use ADMT (Active Directory Migration tool)
Works really fine, migrate users, computers... All you need !
Avatar of theruck

ASKER

yes but you cannot copy profiles between two different domains. i mean you cannot copy a profile from domain1 to a profile of domain2 like this. i do not know why but it does not work because the old profiles are displayed as unknown once you move to other domain
More info :
You can download it here : (free) http://www.microsoft.com/windows2000/downloads/tools/admt/default.asp

note that ADMT version 2 also migrate passwords, the version 1 cannot.
 
>>>unknown once you move to other domain
Because users are not created...or Profile list is not listed in Registry.

Avatar of theruck

ASKER

i cannot migrate with admt because i will not have the two domains runnig at the same time
Avatar of theruck

ASKER

the 7 easy steps are great but doing this on 30 computers will last so long. maybe i could use the usmt?

###>>>unknown once you move to other domain
###Because users are not created...or Profile list is not listed in Registry.

can i do something about that?


###http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/26356/26356.html

i have no account there
Use Robocopy.exe to copy the folders or profiles.
http://www.ss64.com/nt/robocopy.html
If your domains don't run at the same time, you should steup a temporary domain.
Because ADMT is a really powerfull tool, and you'll be able to keep your old SID (then no NTFS permission problem or anything like that), and your users profiles and settings.

If you cannot use ADMT, then why don't you use ldifde ?
You'll be able to export and import any AD object, including your users.
Here some sample of ldifde using :
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bulksteps.asp

Hope this help.



Avatar of theruck

ASKER

i will probably do the trick with the temporary domain because i would not have to go to every computer and can do it from one place.
i will lte you know
Avatar of theruck

ASKER

now i realized that i won't be able to do it this way coz i am not an administrator of the "dom1.com"
Eh?...that you should tell and should keep this thing in mind.
Then try with ldifde, and ask the dom1.com administrator to run your script to export users.
Use a ldifde script to create the exported users on the new domain
Once your users are created on dom2.com, ask them to open a session on dom2 (computers account migration OR trust relationship will be necessary at this point)

Then, migrate the users profiles with scanstate and Loadstate (USMT tools) OR with FASTWIZ (on the Windows XP CD, in the "additionnal task menu"




Avatar of theruck

ASKER

there is no way to set up the trust relationship between the two domains because of the corporate policy
Avatar of theruck

ASKER

so maybe i should edit the first question and say that i need to copy one profile into another on the workstation
Then, just migrate the computer accounts in the identification tab of the system properties...



Use USMT or FASTWIZ to save/restore profiles.

Avatar of theruck

ASKER

using USMT does not work because when i create the data file on one domain when trying to restore in the second domain it complains that the DOM1\Administrator cannot be found...

fastwiz... they are windows 2000 pro workstations
Leave the domain to join any workgroup, and then use USMT.
one second here....

first of all cache the credentials of domain by using UNC \\IP_address..and then start the job.
Avatar of theruck

ASKER

i did that of course... coz i am downloading the data file from the no1 domain controller
now i am experimenting with the "7 magical steps" and it seems to me as the best solution because:

- i have to join the computer to the domain manually so i can do this regedit trick easilly
- i do not have to copy anything i just set the rights to the profile folder as needed
- it takes less time than any other solution mentioned

thanks for help
Ok :-)

As you wish...but let me know..

Thanks for your reply and points