Sergey_Nesterenko
asked on
How to Migrate User Profiles
Hello Experts,
We have created a new Domain where we have crated all new user accounts, its not currently in production. All of our users have roaming profiles which are stored on File Server in the old Domain. My next step is to migrate all the folders with user profiles from old domain to the new one. Can you suggest the tools that I can use to make this prosses as simple as possible? Both DCs are server 2003.
We have created a new Domain where we have crated all new user accounts, its not currently in production. All of our users have roaming profiles which are stored on File Server in the old Domain. My next step is to migrate all the folders with user profiles from old domain to the new one. Can you suggest the tools that I can use to make this prosses as simple as possible? Both DCs are server 2003.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Richcopy will keep the security settings as well
ASKER
I do not want to perserve any permissions or the security settings, I want to copy over the profile folders and change their SIDs, is there a tool that can help me do that?
Active Directory Migration Tool?
http://www.microsoft.com/downloads/details.aspx?FamilyID=6f86937b-533a-466d-a8e8-aff85ad3d212&displaylang=en
The Active Directory Migration Tool version 3 (ADMT v3) simplifies the process of restructuring your operating environment to meet the needs of your organization. You can use ADMT v3 to migrate users, groups, and computers from Microsoft® Windows NT® 4.0 domains to Active Directory® directory service domains; between Active Directory domains in different forests (interforest migration); and between Active Directory domains in the same forest (intraforest migration). ADMT v3 also performs security translation from Windows NT 4.0 domains to Active Directory domains and between Active Directory domains in different forests.
http://www.microsoft.com/downloads/details.aspx?FamilyID=6f86937b-533a-466d-a8e8-aff85ad3d212&displaylang=en
The Active Directory Migration Tool version 3 (ADMT v3) simplifies the process of restructuring your operating environment to meet the needs of your organization. You can use ADMT v3 to migrate users, groups, and computers from Microsoft® Windows NT® 4.0 domains to Active Directory® directory service domains; between Active Directory domains in different forests (interforest migration); and between Active Directory domains in the same forest (intraforest migration). ADMT v3 also performs security translation from Windows NT 4.0 domains to Active Directory domains and between Active Directory domains in different forests.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
I realy wanted to avoid using ADMT, I looked in to it and it looks like its all command line tool, I'm fairly new in the IT field and it looks very complicated. If may be somebody can help me and explain how to use ADMT or suggest another way?
Thank you!
Thank you!
ASKER
As i understand just copying user profile folder from domainA to domainB and pointing user profiles to the share where the profile stored in the domainB will not work because profile folders that were copied over from domainA have old SIDs. So after copying over the profiles I need to re SID them. Do I understand that correctly?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Yes, you are correct. It will be the same thing as taking/giving ownership of the folders. The script above can do that.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you every one for your suggestions, however my instructions were to find an automated solution to transfer user profile folders. Is there a tool for example where in field 1 I specify the Source( where all profiles are stored) in the field 2 the Destination( where the folders are going) check the option to change the SID on the destonation folders. My manager wants me to find a software that will perform this operation.
I dont think there is any software for that, just scripts and some manual.
Take a look at SetACL.exe which has a Sid option
http://www.helge.mynetcologne.de/setacl/
Take a look at SetACL.exe which has a Sid option
http://www.helge.mynetcologne.de/setacl/
This is one of the examples of setacl
This might be useful in a migration scenario where users from domain1 are migrated (copied) to domain2. This command copies all ACEs belonging to 'domain1\user1' to 'domain2\user2' resulting in a duplication of permissions: after the process domain2\user2 has the same permissions as domain1\user1.
Example 16 SetACL.exe -on "\\server1\share1\users" -ot file -actn domain -rec cont_obj -dom "n1:domain1;n2:domain2;da:
This might be useful in a migration scenario where users from domain1 are migrated (copied) to domain2. This command copies all ACEs belonging to 'domain1\user1' to 'domain2\user2' resulting in a duplication of permissions: after the process domain2\user2 has the same permissions as domain1\user1.
Example 16 SetACL.exe -on "\\server1\share1\users" -ot file -actn domain -rec cont_obj -dom "n1:domain1;n2:domain2;da:
I agree with dstewartjr
you (or somebody for you) should write the following script:
Assume, your domains are domain1 and domain2
Take the old home folder
read its permission - who is owner (yourdomain/user1 for example)
copy the folder to it new location
look in domain2 for user domain2/user1
give im necessary permissions
go back to domain1 and look for the next home folder
...
you (or somebody for you) should write the following script:
Assume, your domains are domain1 and domain2
Take the old home folder
read its permission - who is owner (yourdomain/user1 for example)
copy the folder to it new location
look in domain2 for user domain2/user1
give im necessary permissions
go back to domain1 and look for the next home folder
...
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Thank you very much everyone for all your help, I will now try to use your suggestions.
ASKER
I'm new to expert exchange, instead of giving credit to everyone who helped me I just selected one person. Can I do anything to correct that?
select the "Request Attention" and specify what you need
http://technet.microsoft.c
And then make the appropriate changes in ADUC to the users profile paths