Laptops on Active Directory and Off

We are currently in the middle of changing over from a workgroup to active directory.  So far so good except we are getting ready to switch over the laptops and have a few questions.

As I understand it when you are signed in to the domain you have a user porfile under documents and setting in XP or 2000.  You would have a differnet profile (local) when you sign directly onto the machine.  Take for example my machine.  I would use it here on the network/domain and when I leave here and go home I would use it there and since I don't have access to domain at home I would login locally correct?  Now as I understand it I would have to profiles on the machine.  My domain and my local.  What happens with mail profiles and my documents.  Is there anyway to point the local profile at the domain profile?  Or how does everyone else handle this?  Or am I missing something really easy?
stuart100Asked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris DentPowerShell DeveloperCommented:

You can't just use Cached Credentials on the laptop while out of the office? That is, just logon to the Domain as if you were connected.

All documented here:

http://support.microsoft.com/kb/913485

Chris
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
stronglineCommented:
when the laptop is off corp network, you can still "log" into domain with Cached Credential, as Chris pointed out, which will let you use your domain profile.

Further to that, if you want your profile to follow you when you switch to a different workstation/laptop, what you need is a roaming profile on file server.
0
mikeleebrlaCommented:
your easiest option is to use cached login credentials, but do answer your question " Is there anyway to point the local profile at the domain profile?"

yes, i have done this before and it worked fine.  You simply point the local account and the domain account to the same profie.  I used 'tweakui' to make the changes.  TweakUi just makes the registry changes for you which makes it easier.
0
The Ultimate Tool Kit for Technolgy Solution Provi

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy for valuable how-to assets including sample agreements, checklists, flowcharts, and more!

stuart100Author Commented:
Chris-Dent - Thank you I did not even know that existed....Now that article you sent me explains what it is but not how to set it up for our 2000 and XP and Vista Laptops.  Is it built right in and will do it automoaticly or is that something I have to set on the Domain controller?

Mikeleebria - Thank you for the exact answer that is helpful to know also.
0
Chris DentPowerShell DeveloperCommented:

It's built in and happens automatically, never anything I've had to configure.

Chris
0
stuart100Author Commented:
One last question after reading about this it seems interesting because it also says the security rights for the user.  What happens if you switch the user from an admin on a machine to a power user. Do you have to clear the cached rights?
0
Chris DentPowerShell DeveloperCommented:

I don't believe so, local permissions and group membership can still be enumerated without the domain.

Chris
0
stuart100Author Commented:
Ok so I totally lied I have one more question.  Lets say we have a machine that has a perfectly working local profile working on the workgroup.  We would like to make that computer join the domain.  When we do it creates a whole new profile.  THis means we have to resetup mail / drives / etc.  Is there any way to make a computer part of the domain and have it just use or upgrade the current local profile.  That way when we have to do this to our couple hundred machines we are not spending forever.
0
mikeleebrlaCommented:
>>Is there any way to make a computer part of the domain and have it just use or upgrade the current >>local profile.

reboot, log on as admin, rename the new domain profile to domain_old, then rename the "good local profile" with the name of the profile that you just renamed.  that will make the new domain account use the old local profile since it looks for it by name.

0
mikeleebrlaCommented:
thanks alot for the points.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.