RE: Migrating local user profiles with ADMT

Hi Morgan,

Thank you for your reply. The problem no longer persists. I created a new
virtual environment and followed my documented steps again and this time the
user profiles migrated successfully.

Sorry for any inconvenience - I was going to post in a few minutes, but you
had already replied.

"Morgan che(MSFT)" wrote:

Hi,

I built the similar environment and followed your steps to test the result.

My environment is:

Source domain: windows server 2000

Target domain: windows server 2003

Client: windows XP SP2

I have successfully migrated user profile by security translation wizard.
Here is little difference. I translate user profile before migrating
workstation. Please migrate user profile before migrating workstation to
test the result.

If this problem still exist, please provide me the information below:

1) After you migrate users with SID history to the new domain and logon to
the new domain using this new user, please test if you can access the file
resources in old domain?

2)Please send me the log file under "Program files\ADMT\logs\Agent%" via
v-morche@xxxxxxxxxxxxxx

Thanks.

Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
--->Thread-Topic: Migrating local user profiles with ADMT
--->thread-index: AcjQWwpCXcGMDOM6T5imiGS8nyauUQ==
--->X-WBNR-Posting-Host: 207.46.193.207
--->From: =?Utf-8?B?TVQ=?= <MT@xxxxxxxxxxxxxxxxxxxxxxxxx>
--->Subject: Migrating local user profiles with ADMT
--->Date: Tue, 17 Jun 2008 02:18:01 -0700
--->Lines: 62
--->Message-ID: <5E7F1CFB-B247-4FA0-B28A-A0F1CEFA02E7@xxxxxxxxxxxxx>
--->MIME-Version: 1.0
--->Content-Type: text/plain;
---> charset="Utf-8"
--->Content-Transfer-Encoding: 8bit
--->X-Newsreader: Microsoft CDO for Windows 2000
--->Content-Class: urn:content-classes:message
--->Importance: normal
--->Priority: normal
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
--->Newsgroups: microsoft.public.windows.server.migration
--->Path: TK2MSFTNGHUB02.phx.gbl
--->Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.migration:3819
--->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
--->X-Tomcat-NG: microsoft.public.windows.server.migration
--->
--->I am performing a migration from one Windows 2003 Forest containing one
--->domain to another Windows 2003 Forest containing one domain. (This is
due to
--->business restructuring). I am testing the migration using VMWare ESX
server
--->with both Forests on the same virtual switch. All the DCs are running
Server
--->2003 R2 SP2. The Domains and Forests are both running in Windows Server
2003
--->operating mode.
--->
--->I am using ADMT 3 and the first few parts of the migration were
successful,
--->but I have had problems migrating the local user profiles. The current
domain
--->does not use roaming profiles, they are all local to the machine.
--->
--->Steps performed so far:
--->1) Installed the DCs, File and Print server, Exchange and SQL server to
--->mimic the existing domain.
--->2) Installed the DCs for the new domain (I want to test the basic
migration
--->before I look at Exchange etc).
--->3) Configured the OU structure, group policies, login scripts etc in
both
--->domains to mimic the old one.
--->4) Created a two-way trust between the domains and turned off SID
filtering
--->in both directions with netdom.
--->5) I have successfully migrated several groups.
--->6) I have successfully migrated several user accounts, including their
--->passwords.
--->7) I have successfully migrated several workstation machines.
--->
--->However, I am having problems with the user profiles.
--->
--->The scenario is that I have a workstation that is a member of
olddomain. I
--->have logged into that computer as user1 who is a member of olddomain.
When I
--->look at the permissions on that profile in c:\documents and settings,
--->user1@xxxxxxxxxxxxx has permissions.
--->
--->I then restart the machine so the user profile is not in use.
--->I migrate the user account to newdomain.
--->I migrate the computer account to newdomain. On the ‘translate
objects’
--->screen I chose to translate all options including user profiles.
--->After the machine restarts, I log in as the local administrator (not
the
--->domain user) and check the permissions on the user profile in
c:\documents
--->and settings. It has changed from user1@xxxxxxxxxxxxx to
user1@xxxxxxxxxxxxx
--->
--->Up until here, everything looks okay. Unfortunately, when I log into
the PC
--->as the domain user, and select the domain as newdomain, I receive a new
user
--->profile. i.e. I do not receive the settings from the old user profile,
I
--->receive a brand new profile. When I look in c:\documents and settings,
I see
--->2 relevant profiles - user1 and user1.newdomain (there is no
user1.olddomain
--->folder - before the migration, I would log in and receive the profile
just
--->called user1).
--->
--->I tried the process for a different workstation and user, thinking that
I
--->did something wrong. I migrated this second workstation this time
choosing
--->none of the options on the ‘translate objects’ screen. I did not
log in as
--->the second domain user, but tried security translation wizard before
--->attempting login again.
--->
--->In ADMT, I ran the Security Translation Wizard for the second
workstation. I
--->chose to translate all options, including the user profile.
Unfortunately
--->when I logged in as user2 into newdomain, I again received a new
profile.
--->Again when I look in c:\documents and settings I see 2 relevant entries
-
--->user2 and user2.newdomain. The permissions on both are set to
--->user2@xxxxxxxxxxxxx (the permissions do not mention
user2@xxxxxxxxxxxxx).
--->
--->Thank you for any help you can offer.
--->


.

Relevant Pages

  • RE: Migrating local user profiles with ADMT
    ... I built the similar environment and followed your steps to test the result. ... Source domain: windows server 2000 ... I have successfully migrated user profile by security translation wizard. ... Please migrate user profile before migrating workstation to ...
    (microsoft.public.windows.server.migration)
  • RE: ADMT-User Profile Migration
    ... >>I am currently migrating from one Windows 2003 forest to another and ... >>computer account and user profile. ... I assume I use the Security ... >>1) During the Security Translation part, it asks if I want to replace, ...
    (microsoft.public.windows.server.migration)
  • Re: Cannot run a command process from a Windows Service
    ... they have no access to the logon user profile nor do they have access to ... explicitly load the user profile using the Win32 "LoadUserProfile" ... they have their own environment block associated with the process. ... therefore I suggest you to find an alternative for a windows service. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: ssh_config and sshd_config question
    ... Well, this does not work with the environment variable exported on the current window, on which a remote secure shell was initiated by a normal user. ... dant3: End user profile ...
    (SSH)
  • RE: Domain Migration
    ... "do not enable them in the target domain" is used to prevent users logon ... before migrating user profile. ... then the new user profile will be created for the ...
    (microsoft.public.windows.server.migration)
Loading