Settig up Computer accounts

  • Thread starter Thread starter Cary Shultz
  • Start date Start date
C

Cary Shultz

-----Original Message-----
Hi,

I am trying to create the computer and user accounts on my
active dirrectory on the primary domain controller so that
I can switch all of those computers(workstations) to the
domain from workgroup.

I first tried to see whether everything will work for my
workstation. So, I created my user account(no problem) and
the computer account(no problem as well). Then I switched
from workgroup to the domain and everything worked
perfectly for my workstation.

However, when I tryed to swith another workstation to the
domain all user profiles(save screener, setting,
documents, ...) were lost.

I remember when I created the computer account for my
workstation I entered its physical address. And when I was
creating any other account there was not a field for the
physical address. I assume that should be a part of the
problem.

Please tell me what should be done so that any other
computer does not loose its user profiles when being
switched to the domain.

Thanks,

Peter.


.
Click to expand...
Peter,

If your workstations are currently a member of a workgroup
and you are going to be joining them to a domain then that
means that the user profile that they currently using is a
local user profile. When they then log on to the domain
they will have a completely new profile - alebeit, a
domain profile. Remember, it is generally created from
the Default User profile.

One way to resolve this might be to go to My Computer,
right click and select PROPERTIES. Go to the user
profiles tab, select the "local profile" and then choose
the "copy to" button and navigate to the desired domain
profile.

HTH,

Cary
 
This is what I had to do. The local (workgroup) account profiles did
not automatically switch to domain accounts. I had to go to each
user's workstation and copy the local profiles over the newly created
domain profiles. Not fun at all, and some problems arose. I think
that Microsoft intended to have everyone start with domains to begin
with, rather than try and convert profiles from a workgroup.

Greg M.
 
Greg,

Whether the profile for the user is either created on the domain or locally
to the machine it has a SID associated with the account. The accounts/SIDS
are located in the registry at HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList. You will notice a listing of SID's
underneath. This is where the system will look to find the profile for the
user. If a user had a local account on the workstation, then the workstation
is joined to the domain, a user account is created on the domain, then the
domain user has a new SID and we they log onto the machine a new profile is
created.

What you can do is have the new domain user logon to the machine on the
domain and let the system create a new profile. Logoff as the user and back
on as an admin. Open regedt32 and drill down the path mentioned above. Now
highlight each SID and check the value for ProfileImagePath on the right
hand side. Note which one is the domain user and which one is the local
user. Example would be if the user is named BOB on the local machine and the
domain. You should see one with the path of %systemdrive%\...\bob and
bob.domain. Simply switch these two values so the SID for bob.domain reads
just bob, and vice versus.

Next while in regedt32 (make sure windows explorer you able to see hidden
files and folders and do not hide file extensions for known file types)
highlight HKLM, click on Registry and select load hive. In the Look in drill
down to c:\documents and settings\bob and select ntuser.dat and name the
hive test. Highlight the hive, select Security, Permissions, add domain user
account Bob with Full Control, select Advanced, then check the "reset
permissions on all child objects...." say OK. and unload the hive.

Now you should be able to logon to the domain as Bob and receive his old
profile.

You can always copy the profile in System Properties, User Profiles, Copy To
and give the domain user permissions as well if the account does not show up
as Unknown.


--
Mark Ramey [MSFT]

This posting is provided "AS IS" with no warranties, and confers no rights.

GregM said:
This is what I had to do. The local (workgroup) account profiles did
not automatically switch to domain accounts. I had to go to each
user's workstation and copy the local profiles over the newly created
domain profiles. Not fun at all, and some problems arose. I think
that Microsoft intended to have everyone start with domains to begin
with, rather than try and convert profiles from a workgroup.

Greg M.

Peter,

If your workstations are currently a member of a workgroup
and you are going to be joining them to a domain then that
means that the user profile that they currently using is a
local user profile. When they then log on to the domain
they will have a completely new profile - alebeit, a
domain profile. Remember, it is generally created from
the Default User profile.

One way to resolve this might be to go to My Computer,
right click and select PROPERTIES. Go to the user
profiles tab, select the "local profile" and then choose
the "copy to" button and navigate to the desired domain
profile.

HTH,

Cary
Click to expand...
[/QUOTE]
 
Back
Top