Link to home
Start Free TrialLog in
Avatar of ITIExperts1
ITIExperts1

asked on

Converting Domain user to Workgroup

I am moving a customer from a 2003 server with AD installed to a NAS drive. There are only 3 computers that access it. In the past I have used the tool Profwiz to convert a domain account into a local account and vice versa. Is there a better way to do this? One thing I don't like about this tool is that all it really does is create a new account and redirect all the folders to the other accounts directories.

D
ASKER CERTIFIED SOLUTION
Avatar of Shaun Vermaak
Shaun Vermaak
Flag of Australia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
There is no other way than to create a new account. You cannot reuse the AD one, as that has AD-specific GUID (SID) identifying it as the correct domain account.
So ProfWiz does it correct, and it is the best tool to do it.

It's not true that ProfWiz "redirect all the folders to the other accounts directories". It just changes the SID and adjusts privileges on the profile folder, if locally stored. That, of course, cannot work that way with romaing profiles, but I guess you are not talking about that?
It is easy to point a user to existing profile domain or otherwise.
You can link more than one user to a profile
  1. Login with admin user (not one of the users)
  2. Open Regedit
  3. Load hive, browse to original profile, select NTUSER.DAT (not NTUSER.DAT.LOG) and type a name
  4. Open permissions to the name you gave and give new account full control and force inheritance
  5. Expand HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList. Each key here is associated with a user account on this computer. Go through each key and look at the "ProfileImagePath" string. Find the one that is for the profile you get when logging into original account (usually username.computername)
  6. Change it to original profile path
  7. Open Explorer
  8. Browse to original profile
  9. Open permissions and give new account full control and force inheritance
  10. Restart and log in with your account
Profwiz is able to do the profile migration the way you want to, but it's an advanced feature that you have to pay for. The Personal addition only creates symbolic links between the Domain user's profile and the new local user's profile. The Professional and Corporate licenses for Profile Wizard will give you greater control over how things function. The free version is very feature limited.
@Adam: Where did you get that Profwiz uses symbolic links?
Avatar of ITIExperts1
ITIExperts1

ASKER

@Shaun in my experience after I have run Profwiz when I go into the new profiles "libraries" like My documents, etc, they are actually the directories within the local domain profile and not the directories in the current profile
There is no such thing as a domain or local profile. You are just seeing the original profile path which stays the same because it is just changing
ProfileImagePath in HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList after setting permissions. It does not use symlinks
So when I make the local profile let's say it's C:\User\Bob
And the domain profile was C:\User\Bob.local

On the local account my documents is c:\user\bob\documents but after I run profwiz when I select "my documents" it no longer goes to c:\user\bob\documents it now redirects to c:\user\bob.local\documents. So for someone like me that sometimes navigates manually to my documents directory I am going to go to the \bob\documents directory and anything I put there will not show up when i click the "my documents" library because it's pointing to the other folder set.

Does that make sense? If I am missing something here I apologize, what you said may be correct I am just speaking from what I see. Prof wiz makes that new profile with it's own documents, pictures, etc but its actually pointing to the previous domain login's file paths thats how the desktop, documents, pictures, etc come over to the new account. I always thought it was moving the files but its not its just redirecting.
Your whole profile is c:\user\bob.local. You can confirm this by running
SET USERPROFILE

Open in new window


The empty profile C:\User\Bob can be deleted. This will prevent this confusion.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Shaun Vermaak (https:#a42227685)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer