Solved

Profile not roaming as intended after workgroup migration to domain

Posted on 2014-01-04
15
979 Views
Last Modified: 2014-04-09
I migrated a workgroup network to a domain (Windows 2008 R2) and implemented roaming profiles. I decided to migrate user local profile to the domain using the ForensiT migration tool (http://www.forensit.com/downloads.html) But here's the tricky part that I overlooked : the local username profile was different from the standardized chosen form (John Doe vs jdoe on the domain) On the local computer, no problem but when roaming everything is falling apart. ForensiT does not change or recreate the user profile folder so the old username stays and therefore a lot of the profile cannot roam. My question which I have been a while puzzled with is : How can I fix that without having to mess around with the actual profile. This is a lawyer's office and they have a lot going on so messing around with the profile is quite slippy.
0
Comment
Question by:asusxtian
  • 8
  • 4
  • 3
15 Comments
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756683
0
 

Author Comment

by:asusxtian
ID: 39756695
janpakula,

Can you be more precise as in which context would I use the tools you suggest ? I already, as stated in my question, migrated the user profile.

Now I need a way to even the profile folder names for all the users. From C:\Users\John Doe (old workgroup name) to C:\Users\jdoe (new domain login name)

Thanks !
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756705
that http://tacklebox.cns.ohiou.edu/Moveuser/ tool would do it for you - but because you have migrated all of them its too late for that

easiest fix would be to wipe profiles and start from new fresh profiles - and use folder redirection for my documents and desktop (+other important folders)

http://technet.microsoft.com/en-us/library/cc732275.aspx

or follow that

http://support.microsoft.com/kb/947215

(solution 1) and change profile paths to server (roaming paths)
0
 

Author Comment

by:asusxtian
ID: 39756712
How about migrating everything (I mean everything, not only the MS-centric stuff) from the user profile as it is on the workstation so I could rebuild a new profile from it.

Does USMT does that ?
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756716
Yup it should do it - test it first
0
 

Author Comment

by:asusxtian
ID: 39756725
As how would I test that before... ? Don't I need to wipe the old profile first ?
0
 
LVL 14

Expert Comment

by:JAN PAKULA
ID: 39756732
Any backups of given pc?
0
 

Author Comment

by:asusxtian
ID: 39756852
I suppose I could backup the entire PC before hand and then use USMT to migrate everything from the given profiles ? I am Microsoft certified for Windows 7 but using USMT does not appeal much to me, highly time consuming to learn isn't it ?
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39757198
Yes, it is true that Profwiz do not create new profile folder
If you set roaming profile folder same as original user local profile folder in active directory user properties, do you get any error ?

I assumed that you have migrated profile with Profwiz and now domain username is different from actual profile folder.

You can try below, I think it should work 1st test it please

Reboot the Machine 1st
Then Login with a different admin user account.
Rename the affected profile folder to match domain username, note the new path.
Open regedit. Navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList
Find SID (respective domain user) in the keys listed there. It should point to old profile path.
Change the Profileimagepath entry to the new path noted above
Reboot

Now you should be get same profile folder name upon user domain logon as user name and then just set roaming profile such \\server\profile$\%username%

This should work hopefully

Mahesh
0
 

Author Comment

by:asusxtian
ID: 39757316
Maesh,

«If you set roaming profile folder same as original user local profile folder in active directory user properties, do you get any error ?»
Your first suggested solution look appealing as I recently had to change a user name on the server part following a typo error and it went quite smoothly. Maybe by changing the user name profile path (\\Server\Profile$\jdoe) according to the original local profile (C:\users\john-doe) would do the trick ?

I believe I tried (on a test machine) your other suggested solution but it failed. That solution seems to work fine in a workgroup. But I may overlooked the SID...
0
 
LVL 35

Accepted Solution

by:
Mahesh earned 500 total points
ID: 39757654
Yes, that's right, if it works then you can just change user profile path in active directory matching to local profile folder path.
What you can do, after migrating user profile with Profwiz, just go to user properties in AD and set roaming profile path reflecting to local profile path.
Ex: domain user name is MaheshPM, and local profile folder is Mahesh , then you can set roaming profile path as \\server\profile$\Mahesh

But actually 2nd Method also should work. if you have already used Profwiz to migrate user profile
For Ex:
You have a workgroup user called Mahesh. You have user profile folder name as Mahesh
Now you have domain user called MaheshPM and you used Profwiz to migrate workgroup user profile folder to domain user MaheshPM
Means after migration, if you logon though MaheshPM, it should get Mahesh as a profile folder and in ProfileList registry SID for MaheshPM must be copied by Profwiz
Now when you rename folder name from Mahesh to MaheshPM and Profileimagepath from C:\users\Mahesh to C:\Users\MaheshPM, it should work as we are just changing folder name and probably SID is already there for domain account (Domain\MaheshPM) in registry

Please try below.
After renaming profileimagepath registry, just manually add domain user (Domain\MaheshPM) full control NTFS permissions on user SID key under ProfileList registry.
Then on actual profile folder, take ownership of folder and add Domain user (Domain\MaheshPM) full control permissions and click apply.
Then click on advanced in same window and select "Replace all child object...." checkbox and click apply
Once that completed, just reboot machine once and logon with domain user (domain\MaheshPM), it should work

Mahesh
0
 

Author Closing Comment

by:asusxtian
ID: 39769218
Thanks everyone ! I wish I could grade the solution to Excellent but EE is stressing me to close this question. I dit not have time to test the solution and I indeed intend to do so. I wil sure let you all know. Special thanks to Mahesh for your very detailed step by step explanation !
0
 

Author Comment

by:asusxtian
ID: 39984407
I promised I would come back on the issue, so I am ! Maesh I tried your solution in a lab (changing profile name on the local computer and in the registry), and it seemed to have work out indeed !

The only thing on the side note is the all proper process to set up roaming profiles. Any suggestions/link on a good practices document on the subject ? There is plenty HowTos on the subject but is there a more reliable one ?

Thanks again all !
0
 
LVL 35

Expert Comment

by:Mahesh
ID: 39985026
Its better to stay in touch with TechNet article
http://technet.microsoft.com/en-us/library/jj649079.aspx

Also below one is nice
http://blogs.technet.com/b/askds/archive/2008/06/30/automatic-creation-of-user-folders-for-home-roaming-profile-and-redirected-folders.aspx

You will get lots of material on internet\YouTube\Blogs, even on EE but the above two can be used as backbone for all in my opinion wrt Roaming profiles

Mahesh.
0
 

Author Comment

by:asusxtian
ID: 39989426
Technet, I figured. Always a good start indeed. Thanks again !
0

Join & Write a Comment

If you get continual lockouts after changing your Active Directory password, there are several possible reasons.  Two of the most common are using other devices to access your email and stored passwords in the credential manager of windows.
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This Micro Tutorial will teach you the basics of configuring your computer to improve its speed. It will also teach you how to disable programs that are running in the background simultaneously. This will be demonstrated using Windows 7 operating…
The Task Scheduler is a powerful tool that is built into Windows. It allows you to schedule tasks (actions) on a recurring basis, such as hourly, daily, weekly, monthly, at log on, at startup, on idle, etc. This video Micro Tutorial is a brief intro…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now