Migrating local user profiles with ADMT
MT
domain to another Windows 2003 Forest containing one domain. (This is due to
business restructuring). I am testing the migration using VMWare ESX server
with both Forests on the same virtual switch. All the DCs are running Server
2003 R2 SP2. The Domains and Forests are both running in Windows Server 2003
operating mode.
I am using ADMT 3 and the first few parts of the migration were successful,
but I have had problems migrating the local user profiles. The current domain
does not use roaming profiles, they are all local to the machine.
Steps performed so far:
1) Installed the DCs, File and Print server, Exchange and SQL server to
mimic the existing domain.
2) Installed the DCs for the new domain (I want to test the basic migration
before I look at Exchange etc).
3) Configured the OU structure, group policies, login scripts etc in both
domains to mimic the old one.
4) Created a two-way trust between the domains and turned off SID filtering
in both directions with netdom.
5) I have successfully migrated several groups.
6) I have successfully migrated several user accounts, including their
passwords.
7) I have successfully migrated several workstation machines.
However, I am having problems with the user profiles.
The scenario is that I have a workstation that is a member of olddomain. I
have logged into that computer as user1 who is a member of olddomain. When I
look at the permissions on that profile in c:\documents and settings,
us...@olddomain.com has permissions.
I then restart the machine so the user profile is not in use.
I migrate the user account to newdomain.
I migrate the computer account to newdomain. On the ‘translate objects’
screen I chose to translate all options including user profiles.
After the machine restarts, I log in as the local administrator (not the
domain user) and check the permissions on the user profile in c:\documents
and settings. It has changed from us...@olddomain.com to us...@newdomain.com
Up until here, everything looks okay. Unfortunately, when I log into the PC
as the domain user, and select the domain as newdomain, I receive a new user
profile. i.e. I do not receive the settings from the old user profile, I
receive a brand new profile. When I look in c:\documents and settings, I see
2 relevant profiles - user1 and user1.newdomain (there is no user1.olddomain
folder - before the migration, I would log in and receive the profile just
called user1).
I tried the process for a different workstation and user, thinking that I
did something wrong. I migrated this second workstation this time choosing
none of the options on the ‘translate objects’ screen. I did not log in as
the second domain user, but tried security translation wizard before
attempting login again.
In ADMT, I ran the Security Translation Wizard for the second workstation. I
chose to translate all options, including the user profile. Unfortunately
when I logged in as user2 into newdomain, I again received a new profile.
Again when I look in c:\documents and settings I see 2 relevant entries -
user2 and user2.newdomain. The permissions on both are set to
us...@newdomain.com (the permissions do not mention us...@olddomain.com).
Thank you for any help you can offer.
Morgan che(MSFT)
I built the similar environment and followed your steps to test the result.
My environment is:
Source domain: windows server 2000
Target domain: windows server 2003
Client: windows XP SP2
I have successfully migrated user profile by security translation wizard.
Here is little difference. I translate user profile before migrating
workstation. Please migrate user profile before migrating workstation to
test the result.
If this problem still exist, please provide me the information below:
1) After you migrate users with SID history to the new domain and logon to
the new domain using this new user, please test if you can access the file
resources in old domain?
2)Please send me the log file under "Program files\ADMT\logs\Agent%" via
v-mo...@microsoft.com.
Thanks.
Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
--->Thread-Topic: Migrating local user profiles with ADMT
--->thread-index: AcjQWwpCXcGMDOM6T5imiGS8nyauUQ==
--->X-WBNR-Posting-Host: 207.46.193.207
--->From: =?Utf-8?B?TVQ=?= <M...@discussions.microsoft.com>
--->Subject: Migrating local user profiles with ADMT
--->Date: Tue, 17 Jun 2008 02:18:01 -0700
--->Lines: 62
--->Message-ID: <5E7F1CFB-B247-4FA0...@microsoft.com>
--->MIME-Version: 1.0
--->Content-Type: text/plain;
---> charset="Utf-8"
--->Content-Transfer-Encoding: 8bit
--->X-Newsreader: Microsoft CDO for Windows 2000
--->Content-Class: urn:content-classes:message
--->Importance: normal
--->Priority: normal
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
--->Newsgroups: microsoft.public.windows.server.migration
--->Path: TK2MSFTNGHUB02.phx.gbl
--->Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.migration:3819
--->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
--->X-Tomcat-NG: microsoft.public.windows.server.migration
--->
--->I am performing a migration from one Windows 2003 Forest containing one
--->domain to another Windows 2003 Forest containing one domain. (This is
due to
--->business restructuring). I am testing the migration using VMWare ESX
server
--->with both Forests on the same virtual switch. All the DCs are running
Server
--->2003 R2 SP2. The Domains and Forests are both running in Windows Server
2003
--->operating mode.
--->
--->I am using ADMT 3 and the first few parts of the migration were
successful,
--->but I have had problems migrating the local user profiles. The current
domain
--->does not use roaming profiles, they are all local to the machine.
--->
--->Steps performed so far:
--->1) Installed the DCs, File and Print server, Exchange and SQL server to
--->mimic the existing domain.
--->2) Installed the DCs for the new domain (I want to test the basic
migration
--->before I look at Exchange etc).
--->3) Configured the OU structure, group policies, login scripts etc in
both
--->domains to mimic the old one.
--->4) Created a two-way trust between the domains and turned off SID
filtering
--->in both directions with netdom.
--->5) I have successfully migrated several groups.
--->6) I have successfully migrated several user accounts, including their
--->passwords.
--->7) I have successfully migrated several workstation machines.
--->
--->However, I am having problems with the user profiles.
--->
--->The scenario is that I have a workstation that is a member of
olddomain. I
--->have logged into that computer as user1 who is a member of olddomain.
When I
--->look at the permissions on that profile in c:\documents and settings,
--->us...@olddomain.com has permissions.
--->
--->I then restart the machine so the user profile is not in use.
--->I migrate the user account to newdomain.
--->I migrate the computer account to newdomain. On the ‘translate
objects’
--->screen I chose to translate all options including user profiles.
--->After the machine restarts, I log in as the local administrator (not
the
--->domain user) and check the permissions on the user profile in
c:\documents
--->and settings. It has changed from us...@olddomain.com to
us...@newdomain.com
--->
--->Up until here, everything looks okay. Unfortunately, when I log into
the PC
--->as the domain user, and select the domain as newdomain, I receive a new
user
--->profile. i.e. I do not receive the settings from the old user profile,
I
--->receive a brand new profile. When I look in c:\documents and settings,
I see
--->2 relevant profiles - user1 and user1.newdomain (there is no
user1.olddomain
--->folder - before the migration, I would log in and receive the profile
just
--->called user1).
--->
--->I tried the process for a different workstation and user, thinking that
I
--->did something wrong. I migrated this second workstation this time
choosing
--->none of the options on the ‘translate objects’ screen. I did not
log in as
--->the second domain user, but tried security translation wizard before
--->attempting login again.
--->
--->In ADMT, I ran the Security Translation Wizard for the second
workstation. I
--->chose to translate all options, including the user profile.
Unfortunately
--->when I logged in as user2 into newdomain, I again received a new
profile.
--->Again when I look in c:\documents and settings I see 2 relevant entries
-
--->user2 and user2.newdomain. The permissions on both are set to
--->us...@newdomain.com (the permissions do not mention
us...@olddomain.com).
--->
--->Thank you for any help you can offer.
--->
MT
Thank you for your reply. The problem no longer persists. I created a new
virtual environment and followed my documented steps again and this time the
user profiles migrated successfully.
Sorry for any inconvenience - I was going to post in a few minutes, but you
had already replied.
"Morgan che(MSFT)" wrote:
> --->I migrate the computer account to newdomain. On the ‘translate
> objects’
> --->none of the options on the ‘translate objects’ screen. I did not
Morgan che(MSFT)
Thanks for letting us know you have solved this issue. For any other
question, if I could help, please feel free to post here.
Have a nice day!
Sincerely
Morgan Che
Microsoft Online Support
Microsoft Global Technical Support Center
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
--->Thread-Topic: Migrating local user profiles with ADMT
--->thread-index: AcjRNWN9DPSejHk4TkuoWyKb0bSCmw==
--->X-WBNR-Posting-Host: 207.46.193.207
--->From: =?Utf-8?B?TVQ=?= <M...@discussions.microsoft.com>
--->References: <5E7F1CFB-B247-4FA0...@microsoft.com>
<5vDnluS0...@TK2MSFTNGHUB02.phx.gbl>
--->Subject: RE: Migrating local user profiles with ADMT
--->Date: Wed, 18 Jun 2008 04:21:01 -0700
--->Lines: 171
--->Message-ID: <99780CC4-FD84-4ADF...@microsoft.com>
--->MIME-Version: 1.0
--->Content-Type: text/plain;
---> charset="Utf-8"
--->Content-Transfer-Encoding: 8bit
--->X-Newsreader: Microsoft CDO for Windows 2000
--->Content-Class: urn:content-classes:message
--->Importance: normal
--->Priority: normal
--->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
--->Newsgroups: microsoft.public.windows.server.migration
--->Path: TK2MSFTNGHUB02.phx.gbl
--->Xref: TK2MSFTNGHUB02.phx.gbl
microsoft.public.windows.server.migration:3830
--->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
--->X-Tomcat-NG: microsoft.public.windows.server.migration
--->
--->Hi Morgan,
--->
--->Thank you for your reply. The problem no longer persists. I created a
new
--->virtual environment and followed my documented steps again and this
time the
--->user profiles migrated successfully.
--->
--->Sorry for any inconvenience - I was going to post in a few minutes, but
you
--->had already replied.
--->
--->"Morgan che(MSFT)" wrote:
--->
--->> Hi,
--->>
--->> I built the similar environment and followed your steps to test the
result.
--->>
--->> My environment is:
--->>
--->> Source domain: windows server 2000
--->>
--->> Target domain: windows server 2003
--->>
--->> Client: windows XP SP2
--->>
--->> I have successfully migrated user profile by security translation
wizard.
--->> Here is little difference. I translate user profile before migrating
--->> workstation. Please migrate user profile before migrating workstation
to
--->> test the result.
--->>
--->> If this problem still exist, please provide me the information below:
--->>
--->> 1) After you migrate users with SID history to the new domain and
logon to
--->> the new domain using this new user, please test if you can access the
file
--->> resources in old domain?
--->>
--->> 2)Please send me the log file under "Program files\ADMT\logs\Agent%"
via
--->> v-mo...@microsoft.com.
--->>
--->> Thanks.
--->>
--->> Sincerely
--->> Morgan Che
--->> Microsoft Online Support
--->> Microsoft Global Technical Support Center
--->>
--->> Get Secure! - www.microsoft.com/security
--->> =====================================================
--->> When responding to posts, please "Reply to Group" via your newsreader
so
--->> that others may learn and benefit from your issue.
--->> =====================================================
--->> This posting is provided "AS IS" with no warranties, and confers no
rights.
--->>
--->>
--->> --------------------
--->> --->Thread-Topic: Migrating local user profiles with ADMT
--->> --->thread-index: AcjQWwpCXcGMDOM6T5imiGS8nyauUQ==
--->> --->X-WBNR-Posting-Host: 207.46.193.207
--->> --->From: =?Utf-8?B?TVQ=?= <M...@discussions.microsoft.com>
--->> --->Subject: Migrating local user profiles with ADMT
--->> --->Date: Tue, 17 Jun 2008 02:18:01 -0700
--->> --->Lines: 62
--->> --->Message-ID: <5E7F1CFB-B247-4FA0...@microsoft.com>
--->> --->MIME-Version: 1.0
--->> --->Content-Type: text/plain;
--->> ---> charset="Utf-8"
--->> --->Content-Transfer-Encoding: 8bit
--->> --->X-Newsreader: Microsoft CDO for Windows 2000
--->> --->Content-Class: urn:content-classes:message
--->> --->Importance: normal
--->> --->Priority: normal
--->> --->X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.2992
--->> --->Newsgroups: microsoft.public.windows.server.migration
--->> --->Path: TK2MSFTNGHUB02.phx.gbl
--->> --->Xref: TK2MSFTNGHUB02.phx.gbl
--->> microsoft.public.windows.server.migration:3819
--->> --->NNTP-Posting-Host: tk2msftibfm01.phx.gbl 10.40.244.149
--->> --->X-Tomcat-NG: microsoft.public.windows.server.migration
--->> --->
--->> --->I am performing a migration from one Windows 2003 Forest
containing one
--->> --->domain to another Windows 2003 Forest containing one domain.
(This is
--->> due to
--->> --->business restructuring). I am testing the migration using VMWare
ESX
--->> server
--->> --->with both Forests on the same virtual switch. All the DCs are
running
--->> Server
--->> --->2003 R2 SP2. The Domains and Forests are both running in Windows
Server
--->> 2003
--->> --->operating mode.
--->> --->
--->> --->I am using ADMT 3 and the first few parts of the migration were
--->> successful,
--->> --->but I have had problems migrating the local user profiles. The
current
--->> domain
--->> --->does not use roaming profiles, they are all local to the machine.
--->> --->
--->> --->Steps performed so far:
--->> --->1) Installed the DCs, File and Print server, Exchange and SQL
server to
--->> --->mimic the existing domain.
--->> --->2) Installed the DCs for the new domain (I want to test the basic
--->> migration
--->> --->before I look at Exchange etc).
--->> --->3) Configured the OU structure, group policies, login scripts etc
in
--->> both
--->> --->domains to mimic the old one.
--->> --->4) Created a two-way trust between the domains and turned off SID
--->> filtering
--->> --->in both directions with netdom.
--->> --->5) I have successfully migrated several groups.
--->> --->6) I have successfully migrated several user accounts, including
their
--->> --->passwords.
--->> --->7) I have successfully migrated several workstation machines.
--->> --->
--->> --->However, I am having problems with the user profiles.
--->> --->
--->> --->The scenario is that I have a workstation that is a member of
--->> olddomain. I
--->> --->have logged into that computer as user1 who is a member of
olddomain.
--->> When I
--->> --->look at the permissions on that profile in c:\documents and
settings,
--->> --->us...@olddomain.com has permissions.
--->> --->
--->> --->I then restart the machine so the user profile is not in use.
--->> --->I migrate the user account to newdomain.
--->> --->I migrate the computer account to newdomain. On the
‘translate
--->> objects’
--->> --->screen I chose to translate all options including user profiles.
--->> --->After the machine restarts, I log in as the local administrator
(not
--->> the
--->> --->domain user) and check the permissions on the user profile in
--->> c:\documents
--->> --->and settings. It has changed from us...@olddomain.com to
--->> us...@newdomain.com
--->> --->
--->> --->Up until here, everything looks okay. Unfortunately, when I log
into
--->> the PC
--->> --->as the domain user, and select the domain as newdomain, I receive
a new
--->> user
--->> --->profile. i.e. I do not receive the settings from the old user
profile,
--->> I
--->> --->receive a brand new profile. When I look in c:\documents and
settings,
--->> I see
--->> --->2 relevant profiles - user1 and user1.newdomain (there is no
--->> user1.olddomain
--->> --->folder - before the migration, I would log in and receive the
profile
--->> just
--->> --->called user1).
--->> --->
--->> --->I tried the process for a different workstation and user,
thinking that
--->> I
--->> --->did something wrong. I migrated this second workstation this time
--->> choosing
--->> --->none of the options on the ‘translate objects’
screen. I did not
--->> log in as
--->> --->the second domain user, but tried security translation wizard
before
--->> --->attempting login again.
--->> --->
--->> --->In ADMT, I ran the Security Translation Wizard for the second
--->> workstation. I
--->> --->chose to translate all options, including the user profile.
--->> Unfortunately
--->> --->when I logged in as user2 into newdomain, I again received a new
--->> profile.
--->> --->Again when I look in c:\documents and settings I see 2 relevant
entries
--->> -
--->> --->user2 and user2.newdomain. The permissions on both are set to
--->> --->us...@newdomain.com (the permissions do not mention
--->> us...@olddomain.com).
--->> --->
--->> --->Thank you for any help you can offer.
--->> --->
--->>
--->>
--->
iyereyes
I am doing a similar project right now and I am having the same problem with the user profiles. It would really be nice if you could share a copy of your documented steps. I hope it's okay. thanks...
iye
Mickelodeon
I have a kind of problem with this, I have migrated my first profile and
I done it fine.
The I started to migrate other users from the old domain to the new
domain and it started to fail, I know that I did the same procedure
since the first time, anyone have idea about this.
Thank you very much.
--
Mickelodeon
------------------------------------------------------------------------
Mickelodeon's Profile: http://forums.techarena.in/members/mickelodeon.htm
View this thread: http://forums.techarena.in/server-migration/987435.htm
shrao
I am also facing same kind of problem, i have migrated user profiles to
new domain. After migrating when i use to loging us...@newdomain.com it
create a new profile in the above mail. It's really nice if you could
share a copy of your documented steps.
Thanks
--
shrao
------------------------------------------------------------------------
shrao's Profile: http://forums.techarena.in/members/166454.htm
Lanwench [MVP - Exchange]
wrote:
>
>I am also facing same kind of problem, i have migrated user profiles to
>new domain. After migrating when i use to loging us...@newdomain.com it
>create a new profile in the above mail. It's really nice if you could
>share a copy of your documented steps.
>
>Thanks
Hi there - you've replied to a thread no longer on the news server.
Please use an NNTP client to access msnews.microsoft.com instead of
Techarena or any of the various web forums that copy threads from
these servers. Also remember to post new questions as new messages,
providing all relevant detail (such as version numbers etc) so we can
help you - best not to do "me too" posts.
Ace Fekay [MCT]
<lanw...@heybuddy.donotsendme.unsolicitedmail.atyahoo.com> wrote in message
news:6ma5j59nrsq1akuhm...@4ax.com...
Is that what they area called, "me too" posts? :-)
I know what you mean, Lanwench. When I see these broken, expired threads,
it's frustrating to try to help, because we can't see what they are replying
to in the original newsgroups where they came from but have been long
expired past their 90 day lifetime limit at their point of origin (which is
NOT techarena).
--
Ace
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.
Ace Fekay, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE & MCSA
2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
For urgent issues, please contact Microsoft PSS directly. Please check
http://support.microsoft.com for regional support phone numbers.