theruck
asked on
Migrating user profiles between domains
Helo,
I have a windows 2000 domain called "dom1.com" with 30 workstations.
I need to migrate all the users to another domain called "dom2.com" while the user profiles on their workstations will remain. They use outlook express as their e-mail clients.
Is there any way how to migrate it or do i have to copy them manually?
I have a windows 2000 domain called "dom1.com" with 30 workstations.
I need to migrate all the users to another domain called "dom2.com" while the user profiles on their workstations will remain. They use outlook express as their e-mail clients.
Is there any way how to migrate it or do i have to copy them manually?
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Use ADMT (Active Directory Migration tool)
Works really fine, migrate users, computers... All you need !
Works really fine, migrate users, computers... All you need !
ASKER
yes but you cannot copy profiles between two different domains. i mean you cannot copy a profile from domain1 to a profile of domain2 like this. i do not know why but it does not work because the old profiles are displayed as unknown once you move to other domain
See this also: -
http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/26356/26356.html
Hope this helps you.
Thanks
http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/26356/26356.html
Hope this helps you.
Thanks
More info :
You can download it here : (free) http://www.microsoft.com/windows2000/downloads/tools/admt/default.asp
note that ADMT version 2 also migrate passwords, the version 1 cannot.
You can download it here : (free) http://www.microsoft.com/windows2000/downloads/tools/admt/default.asp
note that ADMT version 2 also migrate passwords, the version 1 cannot.
>>>unknown once you move to other domain
Because users are not created...or Profile list is not listed in Registry.
Because users are not created...or Profile list is not listed in Registry.
ASKER
i cannot migrate with admt because i will not have the two domains runnig at the same time
ASKER
the 7 easy steps are great but doing this on 30 computers will last so long. maybe i could use the usmt?
###>>>unknown once you move to other domain
###Because users are not created...or Profile list is not listed in Registry.
can i do something about that?
###http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/26356/26356.html
i have no account there
###>>>unknown once you move to other domain
###Because users are not created...or Profile list is not listed in Registry.
can i do something about that?
###http://www.windowsitpro.com/WindowsScripting/Article/ArticleID/26356/26356.html
i have no account there
If your domains don't run at the same time, you should steup a temporary domain.
Because ADMT is a really powerfull tool, and you'll be able to keep your old SID (then no NTFS permission problem or anything like that), and your users profiles and settings.
If you cannot use ADMT, then why don't you use ldifde ?
You'll be able to export and import any AD object, including your users.
Here some sample of ldifde using :
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bulksteps.asp
Hope this help.
Because ADMT is a really powerfull tool, and you'll be able to keep your old SID (then no NTFS permission problem or anything like that), and your users profiles and settings.
If you cannot use ADMT, then why don't you use ldifde ?
You'll be able to export and import any AD object, including your users.
Here some sample of ldifde using :
http://www.microsoft.com/windows2000/techinfo/planning/activedirectory/bulksteps.asp
Hope this help.
ASKER
i will probably do the trick with the temporary domain because i would not have to go to every computer and can do it from one place.
i will lte you know
i will lte you know
ASKER
now i realized that i won't be able to do it this way coz i am not an administrator of the "dom1.com"
Eh?...that you should tell and should keep this thing in mind.
Then try with ldifde, and ask the dom1.com administrator to run your script to export users.
Use a ldifde script to create the exported users on the new domain
Once your users are created on dom2.com, ask them to open a session on dom2 (computers account migration OR trust relationship will be necessary at this point)
Then, migrate the users profiles with scanstate and Loadstate (USMT tools) OR with FASTWIZ (on the Windows XP CD, in the "additionnal task menu"
Use a ldifde script to create the exported users on the new domain
Once your users are created on dom2.com, ask them to open a session on dom2 (computers account migration OR trust relationship will be necessary at this point)
Then, migrate the users profiles with scanstate and Loadstate (USMT tools) OR with FASTWIZ (on the Windows XP CD, in the "additionnal task menu"
ASKER
there is no way to set up the trust relationship between the two domains because of the corporate policy
ASKER
so maybe i should edit the first question and say that i need to copy one profile into another on the workstation
Then, just migrate the computer accounts in the identification tab of the system properties...
Use USMT or FASTWIZ to save/restore profiles.
ASKER
using USMT does not work because when i create the data file on one domain when trying to restore in the second domain it complains that the DOM1\Administrator cannot be found...
fastwiz... they are windows 2000 pro workstations
fastwiz... they are windows 2000 pro workstations
Leave the domain to join any workgroup, and then use USMT.
one second here....
first of all cache the credentials of domain by using UNC \\IP_address..and then start the job.
first of all cache the credentials of domain by using UNC \\IP_address..and then start the job.
ASKER
i did that of course... coz i am downloading the data file from the no1 domain controller
now i am experimenting with the "7 magical steps" and it seems to me as the best solution because:
- i have to join the computer to the domain manually so i can do this regedit trick easilly
- i do not have to copy anything i just set the rights to the profile folder as needed
- it takes less time than any other solution mentioned
thanks for help
now i am experimenting with the "7 magical steps" and it seems to me as the best solution because:
- i have to join the computer to the domain manually so i can do this regedit trick easilly
- i do not have to copy anything i just set the rights to the profile folder as needed
- it takes less time than any other solution mentioned
thanks for help
Ok :-)
As you wish...but let me know..
Thanks for your reply and points
As you wish...but let me know..
Thanks for your reply and points
http://support.microsoft.com/?kbid=234548