Re: Local Profiles and Logins

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Paul,

Thanks for the reply and insight.

Could possibley take a min to expand on what you mean by your response to -

2 - If the answer to the question above is YES. When the user logins in
for the first time to the AD Domain, is a new Profile created?

Yes, unless you choose to migrate the profiles.

I have tried to look for this opn MS' site and the pointers your gave me but
I am unable to find anything on it. Your assistance would be greatly
appreciated.

Regards,



"Paul Williams [MVP]" <ptw2001@xxxxxxxxxxx> wrote in message
news:e1DkwJ4YGHA.1204@xxxxxxxxxxxxxxxxxxxxxxx
1 - Currently our desktops login in to their own Local Windows 2000
Domains. Once the upgrade to AD is complete, that "local" domain no
longer exisits. Do we need to go to each Desktop and join each PC to
that
new AD "Forest" or "Domain" the traditional "Add PC to a Domain" way via
right-clicking on My Computer and selecting Properties, Computer Name
tab...?

If you upgrade a domain, nothing changes. However, you only really get
the
option to upgrade in NT4 - 2000/ 2003. With 2000 you simply extend the
schema and introduce 2003 systems.

As you appear to be consolodating four into one, I assume that you are in
fact going to be performing an inter-forest migration. In which case, you
should be migrating the computers as well as the users and groups, etc.

The migration tools will perform the disjoin and rejoin for you - that
isn't
a manual task.



2 - If the answer to the question above is YES. When the user logins in
for the first time to the AD Domain, is a new Profile created?

Yes, unless you choose to migrate the profiles.


3 - If the answer to the above is YES. Then does that mean most apps such
as Outlook etc have to be reconfigured for the newly created profile or
will simply copying to old Profile to the new Profile using Copy
To...
work??

See above answer. You can migrate existing profiles (basically, perform a
security translation on them for the new user's SID).


I guess what I am trying to figure out is what exactly do we need to plan
for at the Desktop-level and how do we address these issues while not
having to spend and hour at each PC reconfugring each users profiles and
settings? I am not overly worried about Favs, Wallpapers etc. I am just
concerned with App Setttings, Printers, and Security.

Have a look at the Windows Server 2003 Deployment Guide -- Designing and
deploying directory and security services. There is a free downloadable
version of this book available on Microsoft's website, as well as an
online
version.

--
Paul Williams
Microsoft MVP - Windows Server - Directory Services
http://www.msresource.net | http://forums.msresource.net




.

Relevant Pages

  • Re: I cant select text using word 2007.
    ... With this being a new load with no profiles on the machine, ... Logging in as another user loads templates and add-ins from a different ... It's highly unlikely that the problem is the result of a security patch -- ... If you hover over the scroll bar, ...
    (microsoft.public.word.application.errors)
  • Re: Default User Serurity Permission
    ... and then the [File Security] section. ... and once a new MMC console opens, ... > profiles, I just changed them. ... >>Restore XP to installation Security Defaults ...
    (microsoft.public.windowsxp.security_admin)
  • Re: User Conectivity at Home
    ... systems are all secured via profiles and passwords. ... having a shared folder setup for "everyone" is a breach of such security. ... If your network is behind a NAT router, then your file sharing is more or less ... A designated folder for sharing to "Everyone" isn't a breach of security, ...
    (microsoft.public.windowsxp.network_web)
  • Re: Add the Adminsitrators security group to roaming user profiles
    ... I want to be able to give a certain security group access to user profiles by ... using a gpo. ...
    (microsoft.public.windows.server.active_directory)
  • Re: Migrating User Profiles After Moving To New Domain
    ... Migration high level steps COULD BE: ... security on the client, and translate profiles (at this moment users start ... Translate security of the data/resources from source security ...
    (microsoft.public.win2000.active_directory)