Take an AD Managed Mac Profile and Make it a Local One

Our organization has an Active Directory network, and very few Macs in the network.  When we first deployed my Macbook three years ago, we joined it to the Active Directory domain and the main profile I've been using since then is a managed profile that sometimes is roaming.

This worked fine until some recent domain changeover.  My profile is now orphaned and I'm living off cached credentials.

The IT dept washes their hands of supporting the Mac, and has told me to just create a new, local profile to work through in the future.  I'm on my own when it comes to doing this and getting permissions and access to all my old local files, preferences, etc.

I'm finding a few articles about taking a local profile and migrating it to managed, but very little about going the other way.  I'd like to get out of this domain!

My IT dept will be kind enough to come in and type a domain admin password for me if that is required as part of your procedure, but I am still looking to a bad domain for my network auth server, unplugging from network to do any admin authorization.  I really have a nasty feeling of living on borrowed time with this profile.  Thanks for your help!
centurydanaAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

serialbandCommented:
What do you need to migrate?

If you just need the data and don't care about the Dock and preferences create a local Profile and copy all the data from your domain profile.  Copy or move all the folders except the Library folder.  If you need certain settings, you can selectively copy the files from the ~/Library folder.  Login with the new account and change the ownership of the old account's files.

chown -R "NEW_ACCOUNT" /Users/OLD_ACCOUNT/

Once you've forced the ownership, you can open the files and drag and drop them into the new account.


If you need everything, I would suggest backing up the disk or duplicating it before you make the change.  You will need to create a 3rd account.

First, create an Admin account, make sure it's set with full admin permissions.
Delete your Domain Account, but save the deleted folder, and don't compress it.  (Select Don't change the Home Folder -- You did make a backup, right?)
Create a new account with the Domain account name you had and make it an Admin.
Once logged in, rename the Folder in Terminal.  If your account name is centurydana, then you should have a /Users/centurydana/ home folder.

mv "/Users/centurydana" "/Users/remove-me-later"
mv "/Users/centurydana (Deleted)/" /Users/centurydana/
chown -R centurydana /Users/centurydana/

It's important that you run the chown command to change the user ID on all the files, or you'll run into access problems.

Log out of the admin account and log in with the centurydana account.  You should have all your previous settings with a new non-domain password.
It should prompt you for a keychain password, or possibly not, if you created the account with the same password.  I haven't tried that scenario.  Enter your previous domain account password to unlock your old keychain and update it.

You should have all your previous Dock Icons and App preferences.  Since you're an Admin, you can now delete the intermediate account that you've created.  I've just tested this on an account and I've done this similar scenario on Windows as well.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
centurydanaAuthor Commented:
This looks like a solid procedure recommendation.  I'll give it a run tomorrow.  Thanks!
0
serialbandCommented:
Change one part.  "Once logged in, rename the Folder in Terminal."
Should just be "Rename the Folder in Terminal."   You should be doing this from the temporary Admin Account.
0
Ultimate Tool Kit for Technology Solution Provider

Broken down into practical pointers and step-by-step instructions, the IT Service Excellence Tool Kit delivers expert advice for technology solution providers. Get your free copy now.

centurydanaAuthor Commented:
I swear I am going to attempt this soon. Every document I am seeing over network shares is like old cached versions or something, not showing the last two weeks of edits.  Weird.
0
centurydanaAuthor Commented:
Hey I knocked this procedure out last night and it worked great.  I had to sudo the terminal commands for some reason but with that, worked fine.  Sorry it took so long, even with backups, I couldn't risk my workflow for a while until some stuff was done.

Thanks again!
0
serialbandCommented:
You do have to sudo the commands.  I forgot to add that since I wrote it off the top of my head.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Apple OS

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.