[Samba] Roaming Profiles:Samba PDC:WinXP:User must be local admin SOLVED

Thomas M. Skeren III tms3 at fskklaw.com
Wed Sep 29 21:45:17 GMT 2004

Thanks Zach, but as this project moves forward, doing it the way you did 
for 100+ users would likely cause me to eat a bullet.  Paul's way may 
leave a glitch or too.  However maybe this would solve Awful Hack's 

Zach wrote:

>This worked for me:
>(1) Log in as a local administrator on one of the XP clients
>(2) Create a temporary user, eg test_user1
>(3) System Properties->Advanced->User Profiles:Settings button
>(4) Choose the profile you're trying to migrate and click Copy To
>(5)  Pick some temporary directory, eg c:\test
>(6)  Under "Permitted to use, click change, and add your temporary user
>(7)  Click ok and ok again, and wait while the profile is copied to
>c:\test.  Windows has now added test_user1's SID to NTUSER.DAT in
>(8)  log out and log back in as test_user1, to allow test_user1's
>profile to be set up.
>(9)  log out and log back in as a local administrator
>(10) manually copy the contents of c:\test over top of test_1's
>profile in c:\Documents &...\test_user1\, or the directory where
>test_user1's profile was created.
>(11) log out and log back in as test_user1 to verify the profile loads properly
>(12) log out and log back in as a local admin and repeat steps 3
>through 6, except instead of adding test_user1 under "Permitted to
>use", add your domain user.  Allow the profile to be copied to
>c:\test.  Windows has now added the sid for your domain user to
>NTUSER.DAT (I don't know if the other SIDs are there as well or not).
>(13)  At this point it is vital to make sure the domain user is not
>logged in on any machine otherwise NTUSER.DAT will be overwritten when
>they log out.  Backup the server copy of NTUSER.DAT
>(14) copy c:\test\NTUSER.DAT to your server under the appropriate
>user's profile.
>(15) log out and log back in as the domain user.  It should work.
>This way worked for me and preserved all of the profile's
>custmizations.  I didn't try the profiles program (see man profiles)
>because I couldn't find that binary on my system.  However this seems
>to work perfectly.  Admittedly if you have more than a few users to
>migrate, this could be cumbersome.  Paul Geinger's suggestion is much
>fewer steps.  Your mileage may vary.
>Thanks for everyone's help
>----- Original Message -----
>From: Thomas M. Skeren III <tms3 at fskklaw.com>
>Date: Wed, 29 Sep 2004 13:17:16 -0700
>Subject: Re: [Samba] Roaming Profiles:Samba PDC:WinXP:User must be local admin
>To: Zach <uid000 at gmail.com>
> See Paul Geingers email on this subject.  That method works perfectly.  WooHoo!
> Zach wrote:
> Tom, Can't wait to find out what you learn. In the mean time, a quick
>google search turned up this:
>http://www.samba.org/samba/docs/man/profiles.1.html Unfortunately I
>don't have this package installed on this system, so I don't have the
>man page or the profiles command right now. On Wed, 29 Sep 2004
>10:46:14 -0700, Tom Skeren <tms3 at fskklaw.com> wrote:
> Zach wrote: 
> We just experimented with this here at work. As administrator we
>manually deleted the profile of a user at replaced it with a manual
>copy of another user's profile, and the problem was reproduced
>exactly. When we subsquently deleted NTUSER.DAT and logged in again,
>NTUSER.DAT was rebuilt using the default profile and the profile
>loaded properly. Evidently the SID recorded in NTUSER.DAT has to match
>the user's sid or it won't load properly. Good news Zach. I'm off to
>the office to give it a go myself. Should give a preliminary response
>by noon PST. Cheers, TMS III

More information about the samba mailing list