Solved

Profile not roaming as intended after workgroup migration to domain

Posted on 2014-01-04
15
988 Views
Last Modified: 2014-04-09
I migrated a workgroup network to a domain (Windows 2008 R2) and implemented roaming profiles. I decided to migrate user local profile to the domain using the ForensiT migration tool (http://www.forensit.com/downloads.html) But here's the tricky part that I overlooked : the local username profile was different from the standardized chosen form (John Doe vs jdoe on the domain) On the local computer, no problem but when roaming everything is falling apart. ForensiT does not change or recreate the user profile folder so the old username stays and therefore a lot of the profile cannot roam. My question which I have been a while puzzled with is : How can I fix that without having to mess around with the actual profile. This is a lawyer's office and they have a lot going on so messing around with the profile is quite slippy.
0
Comment
Question by:asusxtian
  • 8
  • 4
  • 3
15 Comments
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756683
0
 

Author Comment

by:asusxtian
ID: 39756695
janpakula,

Can you be more precise as in which context would I use the tools you suggest ? I already, as stated in my question, migrated the user profile.

Now I need a way to even the profile folder names for all the users. From C:\Users\John Doe (old workgroup name) to C:\Users\jdoe (new domain login name)

Thanks !
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756705
that http://tacklebox.cns.ohiou.edu/Moveuser/ tool would do it for you - but because you have migrated all of them its too late for that

easiest fix would be to wipe profiles and start from new fresh profiles - and use folder redirection for my documents and desktop (+other important folders)

http://technet.microsoft.com/en-us/library/cc732275.aspx

or follow that

http://support.microsoft.com/kb/947215

(solution 1) and change profile paths to server (roaming paths)
0
 

Author Comment

by:asusxtian
ID: 39756712
How about migrating everything (I mean everything, not only the MS-centric stuff) from the user profile as it is on the workstation so I could rebuild a new profile from it.

Does USMT does that ?
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756716
Yup it should do it - test it first
0
 

Author Comment

by:asusxtian
ID: 39756725
As how would I test that before... ? Don't I need to wipe the old profile first ?
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756732
Any backups of given pc?
0
Ransomware-A Revenue Bonanza for Service Providers

Ransomware – malware that gets on your customers’ computers, encrypts their data, and extorts a hefty ransom for the decryption keys – is a surging new threat.  The purpose of this eBook is to educate the reader about ransomware attacks.

 

Author Comment

by:asusxtian
ID: 39756852
I suppose I could backup the entire PC before hand and then use USMT to migrate everything from the given profiles ? I am Microsoft certified for Windows 7 but using USMT does not appeal much to me, highly time consuming to learn isn't it ?
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39757198
Yes, it is true that Profwiz do not create new profile folder
If you set roaming profile folder same as original user local profile folder in active directory user properties, do you get any error ?

I assumed that you have migrated profile with Profwiz and now domain username is different from actual profile folder.

You can try below, I think it should work 1st test it please

Reboot the Machine 1st
Then Login with a different admin user account.
Rename the affected profile folder to match domain username, note the new path.
Open regedit. Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
Find SID (respective domain user) in the keys listed there. It should point to old profile path.
Change the Profileimagepath entry to the new path noted above
Reboot

Now you should be get same profile folder name upon user domain logon as user name and then just set roaming profile such \\server\profile$\%username%

This should work hopefully

Mahesh
0
 

Author Comment

by:asusxtian
ID: 39757316
Maesh,

«If you set roaming profile folder same as original user local profile folder in active directory user properties, do you get any error ?»
Your first suggested solution look appealing as I recently had to change a user name on the server part following a typo error and it went quite smoothly. Maybe by changing the user name profile path (\\Server\Profile$\jdoe) according to the original local profile (C:\users\john-doe) would do the trick ?

I believe I tried (on a test machine) your other suggested solution but it failed. That solution seems to work fine in a workgroup. But I may overlooked the SID...
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39757654
Yes, that's right, if it works then you can just change user profile path in active directory matching to local profile folder path.
What you can do, after migrating user profile with Profwiz, just go to user properties in AD and set roaming profile path reflecting to local profile path.
Ex: domain user name is MaheshPM, and local profile folder is Mahesh , then you can set roaming profile path as \\server\profile$\Mahesh

But actually 2nd Method also should work. if you have already used Profwiz to migrate user profile
For Ex:
You have a workgroup user called Mahesh. You have user profile folder name as Mahesh
Now you have domain user called MaheshPM and you used Profwiz to migrate workgroup user profile folder to domain user MaheshPM
Means after migration, if you logon though MaheshPM, it should get Mahesh as a profile folder and in ProfileList registry SID for MaheshPM must be copied by Profwiz
Now when you rename folder name from Mahesh to MaheshPM and Profileimagepath from C:\users\Mahesh to C:\Users\MaheshPM, it should work as we are just changing folder name and probably SID is already there for domain account (Domain\MaheshPM) in registry

Please try below.
After renaming profileimagepath registry, just manually add domain user (Domain\MaheshPM) full control NTFS permissions on user SID key under ProfileList registry.
Then on actual profile folder, take ownership of folder and add Domain user (Domain\MaheshPM) full control permissions and click apply.
Then click on advanced in same window and select "Replace all child object...." checkbox and click apply
Once that completed, just reboot machine once and logon with domain user (domain\MaheshPM), it should work

Mahesh
0
 

Author Closing Comment

by:asusxtian
ID: 39769218
Thanks everyone ! I wish I could grade the solution to Excellent but EE is stressing me to close this question. I dit not have time to test the solution and I indeed intend to do so. I wil sure let you all know. Special thanks to Mahesh for your very detailed step by step explanation !
0
 

Author Comment

by:asusxtian
ID: 39984407
I promised I would come back on the issue, so I am ! Maesh I tried your solution in a lab (changing profile name on the local computer and in the registry), and it seemed to have work out indeed !

The only thing on the side note is the all proper process to set up roaming profiles. Any suggestions/link on a good practices document on the subject ? There is plenty HowTos on the subject but is there a more reliable one ?

Thanks again all !
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39985026
Its better to stay in touch with TechNet article
http://technet.microsoft.com/en-us/library/jj649079.aspx

Also below one is nice
http://blogs.technet.com/b/askds/archive/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders.aspx

You will get lots of material on internet\YouTube\Blogs, even on EE but the above two can be used as backbone for all in my opinion wrt Roaming profiles

Mahesh.
0
 

Author Comment

by:asusxtian
ID: 39989426
Technet, I figured. Always a good start indeed. Thanks again !
0

Featured Post

Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

You may have a outside contractor who comes in once a week or seasonal to do some work in your office but you only want to give him access to the programs and files he needs and keep privet all other documents and programs, can you do this on a loca…
A quick guide on how to use Group Policy to create a custom power plan and set it active on Windows 7.
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

867 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

16 Experts available now in Live!

Get 1:1 Help Now