RE: Migrating local user profiles with ADMT

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

Hi,

Thanks for letting us know you have solved this issue. For any other
question, if I could help, please feel free to post here.

Have a nice day!

Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center

Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.


--------------------
--->Thread-Topic: Migrating local user profiles with ADMT
--->thread-index: AcjRNWN9DPSejHk4TkuoWyKb0bSCmw==
--->X-WBNR-Posting-Host: 207.46.193.207
--->From: =?Utf-8?B?TVQ=?= <MT@xxxxxxxxxxxxxxxxxxxxxxxxx>
--->References: <5E7F1CFB-B247-4FA0-B28A-A0F1CEFA02E7@xxxxxxxxxxxxx>
<5vDnluS0IHA.5796@xxxxxxxxxxxxxxxxxxxxxx>
--->Subject: RE: Migrating local user profiles with ADMT
--->Date: Wed, 18 Jun 2008 04:21:01 -0700
--->Lines: 171
--->Message-ID: <99780CC4-FD84-4ADF-88AD-66BE11AA8349@xxxxxxxxxxxxx>
--->MIME-Version: 1.0
--->Content-Type: text/plain;
---> charset="Utf-8"
--->Content-Transfer-Encoding: 8bit
--->X-Newsreader: Microsoft CDO for Windows 2000
--->Content-Class: urn:content-classes:message
--->Importance: normal
--->Priority: normal
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
--->Newsgroups: microsoft.public.windows.server.migration
--->Path: TK2MSFTNGHUB02.phx.gbl
--->Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.migration:3830
--->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
--->X-Tomcat-NG: microsoft.public.windows.server.migration
--->
--->Hi Morgan,
--->
--->Thank you for your reply. The problem no longer persists. I created a
new
--->virtual environment and followed my documented steps again and this
time the
--->user profiles migrated successfully.
--->
--->Sorry for any inconvenience - I was going to post in a few minutes, but
you
--->had already replied.
--->
--->"Morgan che(MSFT)" wrote:
--->
--->> Hi,
--->>
--->> I built the similar environment and followed your steps to test the
result.
--->>
--->> My environment is:
--->>
--->> Source domain: windows server 2000
--->>
--->> Target domain: windows server 2003
--->>
--->> Client: windows XP SP2
--->>
--->> I have successfully migrated user profile by security translation
wizard.
--->> Here is little difference. I translate user profile before migrating
--->> workstation. Please migrate user profile before migrating workstation
to
--->> test the result.
--->>
--->> If this problem still exist, please provide me the information below:
--->>
--->> 1) After you migrate users with SID history to the new domain and
logon to
--->> the new domain using this new user, please test if you can access the
file
--->> resources in old domain?
--->>
--->> 2)Please send me the log file under "Program files\ADMT\logs\Agent%"
via
--->> v-morche@xxxxxxxxxxxxxx
--->>
--->> Thanks.
--->>
--->> Sincerely
--->> Morgan Che
--->> Microsoft Online Support
--->> Microsoft Global Technical Support Center
--->>
--->> Get Secure! - www.microsoft.com/security
--->> =====================================================
--->> When responding to posts, please "Reply to Group" via your newsreader
so
--->> that others may learn and benefit from your issue.
--->> =====================================================
--->> This posting is provided "AS IS" with no warranties, and confers no
rights.
--->>
--->>
--->> --------------------
--->> --->Thread-Topic: Migrating local user profiles with ADMT
--->> --->thread-index: AcjQWwpCXcGMDOM6T5imiGS8nyauUQ==
--->> --->X-WBNR-Posting-Host: 207.46.193.207
--->> --->From: =?Utf-8?B?TVQ=?= <MT@xxxxxxxxxxxxxxxxxxxxxxxxx>
--->> --->Subject: Migrating local user profiles with ADMT
--->> --->Date: Tue, 17 Jun 2008 02:18:01 -0700
--->> --->Lines: 62
--->> --->Message-ID: <5E7F1CFB-B247-4FA0-B28A-A0F1CEFA02E7@xxxxxxxxxxxxx>
--->> --->MIME-Version: 1.0
--->> --->Content-Type: text/plain;
--->> ---> charset="Utf-8"
--->> --->Content-Transfer-Encoding: 8bit
--->> --->X-Newsreader: Microsoft CDO for Windows 2000
--->> --->Content-Class: urn:content-classes:message
--->> --->Importance: normal
--->> --->Priority: normal
--->> --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
--->> --->Newsgroups: microsoft.public.windows.server.migration
--->> --->Path: TK2MSFTNGHUB02.phx.gbl
--->> --->Xref: TK2MSFTNGHUB02.phx.gbl
--->> microsoft.public.windows.server.migration:3819
--->> --->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
--->> --->X-Tomcat-NG: microsoft.public.windows.server.migration
--->> --->
--->> --->I am performing a migration from one Windows 2003 Forest
containing one
--->> --->domain to another Windows 2003 Forest containing one domain.
(This is
--->> due to
--->> --->business restructuring). I am testing the migration using VMWare
ESX
--->> server
--->> --->with both Forests on the same virtual switch. All the DCs are
running
--->> Server
--->> --->2003 R2 SP2. The Domains and Forests are both running in Windows
Server
--->> 2003
--->> --->operating mode.
--->> --->
--->> --->I am using ADMT 3 and the first few parts of the migration were
--->> successful,
--->> --->but I have had problems migrating the local user profiles. The
current
--->> domain
--->> --->does not use roaming profiles, they are all local to the machine.
--->> --->
--->> --->Steps performed so far:
--->> --->1) Installed the DCs, File and Print server, Exchange and SQL
server to
--->> --->mimic the existing domain.
--->> --->2) Installed the DCs for the new domain (I want to test the basic
--->> migration
--->> --->before I look at Exchange etc).
--->> --->3) Configured the OU structure, group policies, login scripts etc
in
--->> both
--->> --->domains to mimic the old one.
--->> --->4) Created a two-way trust between the domains and turned off SID
--->> filtering
--->> --->in both directions with netdom.
--->> --->5) I have successfully migrated several groups.
--->> --->6) I have successfully migrated several user accounts, including
their
--->> --->passwords.
--->> --->7) I have successfully migrated several workstation machines.
--->> --->
--->> --->However, I am having problems with the user profiles.
--->> --->
--->> --->The scenario is that I have a workstation that is a member of
--->> olddomain. I
--->> --->have logged into that computer as user1 who is a member of
olddomain.
--->> When I
--->> --->look at the permissions on that profile in c:\documents and
settings,
--->> --->user1@xxxxxxxxxxxxx has permissions.
--->> --->
--->> --->I then restart the machine so the user profile is not in use.
--->> --->I migrate the user account to newdomain.
--->> --->I migrate the computer account to newdomain. On the
ââ?¬Ë?translate
--->> objects�
--->> --->screen I chose to translate all options including user profiles.
--->> --->After the machine restarts, I log in as the local administrator
(not
--->> the
--->> --->domain user) and check the permissions on the user profile in
--->> c:\documents
--->> --->and settings. It has changed from user1@xxxxxxxxxxxxx to
--->> user1@xxxxxxxxxxxxx
--->> --->
--->> --->Up until here, everything looks okay. Unfortunately, when I log
into
--->> the PC
--->> --->as the domain user, and select the domain as newdomain, I receive
a new
--->> user
--->> --->profile. i.e. I do not receive the settings from the old user
profile,
--->> I
--->> --->receive a brand new profile. When I look in c:\documents and
settings,
--->> I see
--->> --->2 relevant profiles - user1 and user1.newdomain (there is no
--->> user1.olddomain
--->> --->folder - before the migration, I would log in and receive the
profile
--->> just
--->> --->called user1).
--->> --->
--->> --->I tried the process for a different workstation and user,
thinking that
--->> I
--->> --->did something wrong. I migrated this second workstation this time
--->> choosing
--->> --->none of the options on the ââ?¬Ë?translate objectsââ?¬â?¢
screen. I did not
--->> log in as
--->> --->the second domain user, but tried security translation wizard
before
--->> --->attempting login again.
--->> --->
--->> --->In ADMT, I ran the Security Translation Wizard for the second
--->> workstation. I
--->> --->chose to translate all options, including the user profile.
--->> Unfortunately
--->> --->when I logged in as user2 into newdomain, I again received a new
--->> profile.
--->> --->Again when I look in c:\documents and settings I see 2 relevant
entries
--->> -
--->> --->user2 and user2.newdomain. The permissions on both are set to
--->> --->user2@xxxxxxxxxxxxx (the permissions do not mention
--->> user2@xxxxxxxxxxxxx).
--->> --->
--->> --->Thank you for any help you can offer.
--->> --->
--->>
--->>
--->

.

Relevant Pages

  • Re: User-Specific Settings
    ... 'remember each folder's view settings' is checked. ... Outlook and all of our applications run on our server and are accessed thru ... >> Profile tab for all of our users. ... >>> log on to another workstation. ...
    (microsoft.public.win2000.termserv.apps)
  • Re: KRB Error
    ... approximately 4 pages of GP settings that include settings in User rights ... with no warranties and confers no rights] ... party vendor was used to harden security on this server and another ... both members of Domain A. Another member server on Domain A did not ...
    (microsoft.public.win2000.active_directory)
  • Re: "Classic logon" screen in XP does not remeber the user name
    ... If you used the File and Settings ... that you can access them fine in the profile you want to use them in. ... and log onto a workstation, that workstation immediately goes to a ... you can work from the server and ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Specified Domain either does not exist or could not be contacted.
    ... I have not used portqryui is that somewhere on the server CD? ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Event ID 1511 "Windows cannot find the local profile and is logging ... Received Packets Delivered = 509,008 ...
    (microsoft.public.windows.server.active_directory)
  • Re: Specified Domain either does not exist or could not be contacted.
    ... I have not used portqryui is that somewhere on the server CD? ... This posting is provided "AS IS" with no warranties, and confers no rights. ... Event ID 1511 "Windows cannot find the local profile and is logging ... Received Packets Delivered = 509,008 ...
    (microsoft.public.windows.server.active_directory)