User Accounts shuffle solution please

  • Thread starter Thread starter GRCC
  • Start date Start date
G

GRCC

Hi,
W2K AD DC, 10 workstations 3 employees have changed jobs (seats & PC's) They
have different pc's now, like the Golf Pro is now the GM and is at his PC in
GM's office (different user name of course). Permissions are not an issue,
but what about the SIDs? Can I just change all the names (user login name,
pre windows 2000 and passwords and the home directory name and path in the
profile tabs? Seems too easy? What is my best approach here with the least
amopunt of administrative efforts? (sounds like a test question) Simply,
these 3 users need to be moved to different workstations
Thanks sop Much
GRCC
 
What workstation they are at should not matter unless you've been doing
workstation-specific settings in AD. Just change the rights they need on
the domain controller and AD will do the rest.
 
OK, I'm sorry, I do not understand? Do you mean Bo Press can use his login
name and password at Steve p's computer and nothing has to be changed? I
really am lost here. No permissions have been changed nor do they need to be
changed.
Sorry if I sound dumb!
GRCC

Richard G. Harper said:
What workstation they are at should not matter unless you've been doing
workstation-specific settings in AD. Just change the rights they need on
the domain controller and AD will do the rest.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



GRCC said:
Hi,
W2K AD DC, 10 workstations 3 employees have changed jobs (seats & PC's)
They
have different pc's now, like the Golf Pro is now the GM and is at his PC
in
GM's office (different user name of course). Permissions are not an issue,
but what about the SIDs? Can I just change all the names (user login name,
pre windows 2000 and passwords and the home directory name and path in the
profile tabs? Seems too easy? What is my best approach here with the least
amopunt of administrative efforts? (sounds like a test question) Simply,
these 3 users need to be moved to different workstations
Thanks sop Much
GRCC
Click to expand...
Click to expand...
 
OK. Richard, I understand now. But I just realized, there are 2 NEW people
and 2 people left. So I guess I have more than one issue.
If I may elaborate:
1.B goes to S's PC No problem B already had an account
2. S leaves OK
3.New guy is at Pro shop PC named proshop So that's OK Logs in as user
proshop
4. D is new at B's old PC.
So should I delete s account and create new one for d or can I move S
account to the PC and just rename the user?
5. C is new at the PC of the other person that left
Sorry for all this.
GRCC

GRCC said:
OK, I'm sorry, I do not understand? Do you mean Bo Press can use his login
name and password at Steve p's computer and nothing has to be changed? I
really am lost here. No permissions have been changed nor do they need to be
changed.
Sorry if I sound dumb!
GRCC

Richard G. Harper said:
What workstation they are at should not matter unless you've been doing
workstation-specific settings in AD. Just change the rights they need on
the domain controller and AD will do the rest.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



GRCC said:
Hi,
W2K AD DC, 10 workstations 3 employees have changed jobs (seats & PC's)
They
have different pc's now, like the Golf Pro is now the GM and is at his PC
in
GM's office (different user name of course). Permissions are not an issue,
but what about the SIDs? Can I just change all the names (user login name,
pre windows 2000 and passwords and the home directory name and path in the
profile tabs? Seems too easy? What is my best approach here with the least
amopunt of administrative efforts? (sounds like a test question) Simply,
these 3 users need to be moved to different workstations
Thanks sop Much
GRCC
Click to expand...
Click to expand...
Click to expand...
 
When you assign rights to any user or group in Active Directory those rights
follow that user or group to any PC they are using, as long as the PC in
question is also a member of the Active Directory domain. It doesn't matter
what PC they use - as long as that PC is a domain member, their rights will
follow them.

The only two things that can break this would be if they PC they're logging
into isn't a domain member, or if the PC has different rights set up in
Active Directory.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



GRCC said:
OK, I'm sorry, I do not understand? Do you mean Bo Press can use his login
name and password at Steve p's computer and nothing has to be changed? I
really am lost here. No permissions have been changed nor do they need to
be
changed.
Sorry if I sound dumb!
GRCC

Richard G. Harper said:
What workstation they are at should not matter unless you've been doing
workstation-specific settings in AD. Just change the rights they need on
the domain controller and AD will do the rest.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



GRCC said:
Hi,
W2K AD DC, 10 workstations 3 employees have changed jobs (seats & PC's)
They
have different pc's now, like the Golf Pro is now the GM and is at his PC
in
GM's office (different user name of course). Permissions are not an issue,
but what about the SIDs? Can I just change all the names (user login name,
pre windows 2000 and passwords and the home directory name and path in the
profile tabs? Seems too easy? What is my best approach here with the least
amopunt of administrative efforts? (sounds like a test question)
Simply,
these 3 users need to be moved to different workstations
Thanks sop Much
GRCC
Click to expand...
Click to expand...
Click to expand...
 
You aren't moving any accounts to any computer. That happens automatically.
Whether you create new accounts for the new users or rename old accounts for
them to use is entirely up to you and will make no difference whatsoever.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



GRCC said:
OK. Richard, I understand now. But I just realized, there are 2 NEW people
and 2 people left. So I guess I have more than one issue.
If I may elaborate:
1.B goes to S's PC No problem B already had an account
2. S leaves OK
3.New guy is at Pro shop PC named proshop So that's OK Logs in as user
proshop
4. D is new at B's old PC.
So should I delete s account and create new one for d or can I move S
account to the PC and just rename the user?
5. C is new at the PC of the other person that left
Sorry for all this.
GRCC

GRCC said:
OK, I'm sorry, I do not understand? Do you mean Bo Press can use his
login
name and password at Steve p's computer and nothing has to be changed? I
really am lost here. No permissions have been changed nor do they need to be
changed.
Sorry if I sound dumb!
GRCC

Richard G. Harper said:
What workstation they are at should not matter unless you've been doing
workstation-specific settings in AD. Just change the rights they need on
the domain controller and AD will do the rest.

--
Richard G. Harper [MVP Shell/User] (e-mail address removed)
* In fond memory ... Alex, you shall be sorely missed
* http://www.aumha.org/alex.htm



Hi,
W2K AD DC, 10 workstations 3 employees have changed jobs (seats & PC's)
They
have different pc's now, like the Golf Pro is now the GM and is at
his PC
in
GM's office (different user name of course). Permissions are not an issue,
but what about the SIDs? Can I just change all the names (user login name,
pre windows 2000 and passwords and the home directory name and path
in the
profile tabs? Seems too easy? What is my best approach here with the least
amopunt of administrative efforts? (sounds like a test question) Simply,
these 3 users need to be moved to different workstations
Thanks sop Much
GRCC
Click to expand...
Click to expand...
Click to expand...
 
Back
Top