Re: Joining vista to SBS domain and migrating account

Hello Miles,

The Vista computer is Vista Business SP1 with all patches applied (pre-installed Dell Vostro). The SBS computer is SBS 2003 R2 with all patches applied (self installed Dell PE T300). The 'rip-curl' vista/outlook 2k7/sbs patch was also applied manually, just to be sure.

I used 'a' local administrator account different to the one I was trying to migrate. Should I be using the built-in (disabled/hidden) local administrator account when running connectcomputer?

I ran IE 'as administrator' before invoking connectcomputer. It failed in the same way on several occasions. As far as I can tell, the migration part occurs after the first reboot after running connect computer so I have no control over the account running the migration.

There were no other vista clients to try on this network: all the other clients were XP Pro and there were no issues with them.

I eventually gave up trying connectcomputer to migrate the account and resorting to copying the profile to the server (the user profile 'copy' button was greyed out except in safe mode). I could then convert the account to a roaming profile and have the user settings imported to the domain account. (This too was troublesome, because I had to find out to delete the previous profile registry keys before the profile would load on the client computer).

One other thing I noticed about this vista PC was than the SBS default logon script would prompt for UAC elevation when logging on as the domain user, which I had never seen on other vista clients in other domains. I don't know if this is significant.

Another outstanding issue is that I get 'access is denied' errors in the event log when this computer tries folder redirection to a server share. None of the XP clients had problems redirecting folders, and even though I made the share and folder permissions fully permissive, I still get 'access is denied' when the policy tries to create the subfolders for this redirection. I am completed stumped on this one and I'm wondering if it's anything to do with SMB signing.

The permissions on the user folder C:\users\james looked fine (JAMES\administrators had full control)

Here is the complete sbsmig log:


05/08/2008 11:11
-- Starting sbsmig.exe --
AddUsersToLocalAdmin() -- calling NetLocalGroupAddMembers( Administrators, nova.local\james )
AddDomainUserToRemoteDesktopGroup() -- we're not a server, not adding domain users group to remote desktop group
calling SetComputerNameEx( JAMES )
ChangeComputerName() -- decrypt(1) OK
ChangeComputerName() -- decrypt(2) OK
RemoveAccount() -- success
Successfully taking ownership of C:\Users\James
Successfully setting DACL of C:\Users\James
Failed to set new ownership to C:\Users\James [1307]
Failed to set Built-in Admin as owner of the profile C:\Users\James, [1307]
Migrate James to nova.local\james...
Failed with [80070020].
DeleteSBSFile() -- DeleteFile( C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe ) failed -- GLE = [5]
running logoff command [C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe] [C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe /l]
-- Exiting sbsmig.exe --

05/08/2008 11:18
-- Starting sbsmig.exe --
running with the /l switch
WinMain() - calling DwWaitForShell()
WinMain() - calling ExitWindowsEx()
WinMain() - ExitWindowsEx() returned [1] - GLE() - [0]
-- Exiting sbsmig.exe --

06/08/2008 17:06
-- Starting sbsmig.exe --
AddUsersToLocalAdmin() -- calling NetLocalGroupAddMembers( Administrators, nova.local\james )
AddDomainUserToRemoteDesktopGroup() -- we're not a server, not adding domain users group to remote desktop group
ChangeComputerName() -- no need to change
Successfully taking ownership of C:\Users\James
Successfully setting DACL of C:\Users\James
Failed to set new ownership to C:\Users\James [1307]
Failed to set Built-in Admin as owner of the profile C:\Users\James, [1307]
Migrate James to nova.local\james...
Failed with [80041008].
DeleteSBSFile() -- DeleteFile( C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe ) failed -- GLE = [5]
running logoff command [C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe] [C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe /l]
-- Exiting sbsmig.exe --

06/08/2008 17:08
-- Starting sbsmig.exe --
running with the /l switch
WinMain() - calling DwWaitForShell()
WinMain() - calling ExitWindowsEx()
WinMain() - ExitWindowsEx() returned [1] - GLE() - [87]
-- Exiting sbsmig.exe --

07/08/2008 10:34
-- Starting sbsmig.exe --
AddUsersToLocalAdmin() -- calling NetLocalGroupAddMembers( Administrators, nova.local\james )
AddDomainUserToRemoteDesktopGroup() -- we're not a server, not adding domain users group to remote desktop group
ChangeComputerName() -- no need to change
Successfully taking ownership of C:\Users\James
Successfully setting DACL of C:\Users\James
Failed to set new ownership to C:\Users\James [1307]
Failed to set Built-in Admin as owner of the profile C:\Users\James, [1307]
Migrate James to nova.local\james...
Failed with [80041008].
DeleteSBSFile() -- DeleteFile( C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe ) failed -- GLE = [5]
running logoff command [C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe] [C:\Program Files\Microsoft Windows Small Business Server\Clients\sbsmig.exe /l]
-- Exiting sbsmig.exe --

07/08/2008 10:35
-- Starting sbsmig.exe --
running with the /l switch
WinMain() - calling DwWaitForShell()
WinMain() - calling ExitWindowsEx()
WinMain() - ExitWindowsEx() returned [1] - GLE() - [0]
-- Exiting sbsmig.exe --


--
stephen


Miles Li [MSFT] wrote:
Hello Stephen,

Thank you for posting here.

According to your description, my understanding is that:

When you attempt to add Windows Vista SP1 client to SBS2003R2 domain through the ConnectComputer wizard, a error is prompted in the migration user profile process.

If I have misunderstood the problem, please don't hesitate to let me know.

Suggestions:
===========================
From the error log, the sbsmig.exe successfully add selected Users to Local Administrators group. However, it fails to set the proper ownership on C:\Users\James profile folder. Please make sure that you log on the Windows Vista SP1 client with local administrator user account while run the connectcomputer wizard.

1. Restart the Windows Vista SP1 client.
2. Log on to the computer with the local Administrator account then run the connectcomputer wizard to check how it works.

If the issue persist, please try to verify the ownership and permissions on the C:\Users\James profile folder.

1. Log onto the system with the local Administrator account.
2. In the Explorer, right click the on C:\Users\James --->security tab--->advanced--->owner.
3. Try to replace the owner of the folder to local Administrators group then run the connectcomputer wizard again to check how it works.

If we cannot resolve the issue after we perform the steps above, please help me collect some information for further investigation:

Information needed:
===========================
1. Has the SBS 2003 server applied the update that is described in Microsoft knowledge base article 926505?

926505 Windows Small Business Server 2003: Windows Vista and Outlook 2007 compatibility update
http://support.microsoft.com/kb/926505

2. Does this issue happen on a specific Windows Vista client? How it works if you try to connect another Windows Vista client to the SBS domain?
3. Could you please send me at Miles Li <mailto:v-mileli@xxxxxxxxxxxxx> the sbsmig.log for the further investigation?

I hope this will give you some help. If you have any questions or concerns, please do not hesitate to let me know.



Best regards,

Miles Li

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
This newsgroup only focuses on SBS technical issues. If you have issues regarding other Microsoft products, you'd better post in the corresponding newsgroups so that they can be resolved in an efficient and timely manner. You can locate the newsgroup here: http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the "Notify me of replies" box to receive e-mail notifications when there are any updates in your thread. When responding to posts via your newsreader, please "Reply to Group" so that others may learn and benefit from your issue.

Microsoft engineers can only focus on one issue per thread. Although we provide other information for your reference, we recommend you post different incidents in different threads to keep the thread clean. In doing so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.


.