Solved

Fix a corrupt AD user account

Posted on 2009-07-16
8
1,311 Views
Last Modified: 2012-05-07
Hello,

I cannot believe I cannot find what I'm looking for regarding this issue, so I'll just post it.  I have a Windows 2003 AD network with approximately 150 users.  I have a couple of users who are experiencing some weird activity on their networked computers.  Things like slow network browsing in Windows Explorer, things flashing while trying to drill into a network share.  I suspect a corrupt AD account (profile).  I need the exact steps to create a new AD account for this user and not lose any data or local configurations on their computer.  I am familiar with the renaming of the local profile and then copying it back to the new one as a local admin, but am not sure what to do in AD to provide the user with a new, clean user account.

Thanks,
Cheese
0
Comment
Question by:cheesebugah
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 5
  • 3
8 Comments
 
LVL 11

Accepted Solution

by:
Abhay Pujari earned 500 total points
ID: 24876152
Same can be done in AD also. Create a new profile. Login with that profile and log off. Then log in as Domain or local administrator and copy existing user profile to newly created profile.
0
 

Author Comment

by:cheesebugah
ID: 24883253
abhvp,

Hmmm.  Do you mean create a new user account in AD when you say create a new profile?  Why would I copy the corrupt user account back to the new user account in AD?  You see, I would like some detailed instructions on this subject, distinguishing between the two separate procedures on the local machine and on the DC.

Thanks,
Cheese
0
 
LVL 11

Expert Comment

by:Abhay Pujari
ID: 24892616
Why would I copy the corrupt user account back to the new user account in AD?
>>> If you and your users are ok with new settings created by new profile, then don't copy old profile.

Can you please ask specific questions?
0
What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

 

Author Comment

by:cheesebugah
ID: 24895432
abhvp,

I greatly appreciate your help with this issue. I would really like you to distinguish between the steps taken in AD and the steps performed locally.  I am already familiar with the steps to take locally, so exactly what would I do in AD to complete this task?  Our users would "NOT" be okay with any new settings.  Here is what I think I should do.  Create the user a new account in AD.  Obviously, with a slightly different name than their original.  Log onto that account on the user's machine.  Log on as the local administrator.   Copy the original profile over to the new one we just created, overwriting it with the old profile settings.  Here is where I'm not sure what to do in AD.  Do I copy the newly created user account over to the old one, or just rename it?  We would need the user to remain in any groups that they previously belonged to.  If I just rename it, I'll have to manually put that new user account in the same groups that the old one belonged to.  I'm just not quite sure what "exactly" to do here without creating any issues.  I hope that helps you understanding exactly what I'm looking for.

Thanks,
Cheese  
0
 
LVL 11

Expert Comment

by:Abhay Pujari
ID: 24901704
Your procedure seems to be correct. Instead of local administrator, you need to login with domain administrator. Also you need to assign new user to a particular group to which old one is associated. You need to copy Old profile over new profile as all the settings are with old profile.

Am I clear now?
0
 

Author Comment

by:cheesebugah
ID: 24906676
abhvp,

When you say "You need to copy Old profile over new profile as all the settinga re with old profile," do you mean locally?  What exactly do I do in AD?

Thanks,
0
 
LVL 11

Expert Comment

by:Abhay Pujari
ID: 24912716
I mean it locally. Steps are
1) Create a new account in AD.
2) assign this account to a particular local group on client machine to which old account is associated.
3) Login in with this new user and then log off.
4) Now login with a domain admin and then go to control panel, user accounts.
5) Copy old profile to new one.

Alternate will be. Check and note down any settings of old profile. Replicate same with new profile.
0
 
LVL 11

Expert Comment

by:Abhay Pujari
ID: 24912720
I am really very sorry. I posted it late. Thanks for accepting my suggestion.
0

Featured Post

[Webinar] Code, Load, and Grow

Managing multiple websites, servers, applications, and security on a daily basis? Join us for a webinar on May 25th to learn how to simplify administration and management of virtual hosts for IT admins, create a secure environment, and deploy code more effectively and frequently.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Numerous times I have been asked this questions that what is it that makes my machine log on so slow, there have been cases where computers took 23 minute exactly after taking password and getting to the desktop. Interesting thing was the fact th…
Scenerio: You have a server running Server 2003 and have applied a retail pack of Terminal Server Licenses.  You want to change servers or your server has crashed and you need to reapply the Terminal Server Licenses. When you enter the 16-digit lic…
Attackers love to prey on accounts that have privileges. Reducing privileged accounts and protecting privileged accounts therefore is paramount. Users, groups, and service accounts need to be protected to help protect the entire Active Directory …
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

738 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question