G
Guest
Hello,
My situation is the following. Is technically complex.
I have 400 Windows 2000 PCs in workgroup, splitted between 30 sites. They
are all goiing to join a W2K AD Domain. I developped a Kixforms interface to
remotely join PCs to domain (netdom) and update DNS/WINS/NetBIOS IP settings.
It works fine.
My second concern is that existing local users accounts will move to domain
acccounts. And it won't be possible to map name (MYPC\Account won't be turned
into MYDomain\Account). Profiles won't be roaming so the new user will need
to get the former account settings.
For that purpose I wrote an interface that does the following :
- This tool has to be launched when logged as a local administrator
- Browse recursively the key HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList to collect all SIDs.
- SIDs are converted into names
- I populate 2 list boxes : one with the local accounts and another with
target domain accounts.
- I select the profile I want to copy and the target account
- I create the "future" profile folder for domain account
- I grant domain user Full Control on the entire directory
- I create HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList\<Domain Account SID>
- I create the value ProfileImagePath and affect the local profile path.
Till there everything's fine. But I made count that the key
HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\<Domain Account
SID>\sid has to be populated.
Could anyone explain me how is filled this value : conversion of the SID to
binary data, reading of the NTFS owner of the profile folder ?
I have almost reached my target and that's this last point that troubles me.
By the way I just want to log once on a pc and select the profile to
"create" and fill with other local profile data.
Anyway, would this be a good way to proceed ?
- Give the domain account full acces to former profile local dir ? (cacls,
ProfilePath\<SID>\ProfileImagePath and change the value ?
I know that it is an odd situation but I couldn't find any powerfull tool
that does what I want. So I decided to write one. But I lack quite a few data
to finish the job.
Thanks a lot in advance.
David Chatel
France
My situation is the following. Is technically complex.
I have 400 Windows 2000 PCs in workgroup, splitted between 30 sites. They
are all goiing to join a W2K AD Domain. I developped a Kixforms interface to
remotely join PCs to domain (netdom) and update DNS/WINS/NetBIOS IP settings.
It works fine.
My second concern is that existing local users accounts will move to domain
acccounts. And it won't be possible to map name (MYPC\Account won't be turned
into MYDomain\Account). Profiles won't be roaming so the new user will need
to get the former account settings.
For that purpose I wrote an interface that does the following :
- This tool has to be launched when logged as a local administrator
- Browse recursively the key HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList to collect all SIDs.
- SIDs are converted into names
- I populate 2 list boxes : one with the local accounts and another with
target domain accounts.
- I select the profile I want to copy and the target account
- I create the "future" profile folder for domain account
- I grant domain user Full Control on the entire directory
- I create HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList\<Domain Account SID>
- I create the value ProfileImagePath and affect the local profile path.
Till there everything's fine. But I made count that the key
HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\<Domain Account
SID>\sid has to be populated.
Could anyone explain me how is filled this value : conversion of the SID to
binary data, reading of the NTFS owner of the profile folder ?
I have almost reached my target and that's this last point that troubles me.
By the way I just want to log once on a pc and select the profile to
"create" and fill with other local profile data.
Anyway, would this be a good way to proceed ?
- Give the domain account full acces to former profile local dir ? (cacls,
ProfilePath\<SID>\ProfileImagePath and change the value ?
I know that it is an odd situation but I couldn't find any powerfull tool
that does what I want. So I decided to write one. But I lack quite a few data
to finish the job.
Thanks a lot in advance.
David Chatel
France