[Samba] Desktops for non-roaming profiles

[Ryan Bair]

I'd recommend trying USMT ( user state migration tool ) from
Microsoft. It has options specifically for migrating local account
data and settings to domain accounts. I have not used it for the
purpose so more research would be advised before diving in.

On Mon, Mar 24, 2008 at 7:39 PM, Dennis McLeod <dmcleod at foranyauto.com> wrote:
> Yeah, in my domain, it's simply a matter of logging on as the domain user,
>  then doing the profile copy as described.
>  I get all of the user settings, documents, Outlook Profile, etc.
>  Just not cookies, passwords, etc.
>  I can open Outlook, but have to re-enter their login information do download
>  email (POP, not Exchange...).
>  Same on some websites.
>  Then there are permission issues, too.
>  I made a group, (other than domainusers) put my users in there, and made
>  that group part of the local administrators group.
>  Does the test user have Administrator permissions on the machine.
>  Not that you want to run this way, but a good way to test.
>  How about a domain user with NO local account.
>  Does that get you a new profile based off of the default profile? With or
>  without the other issues?
>  Good luck....
>  Dennis
>
>  The whole thread I gave may be better than that particular message I pointed
>  you at.:
>
>  http://groups.google.com/group/linux.samba/browse_thread/thread/42370eda9bdb
>  3ef0/9c8b4de804545326?#9c8b4de804545326
>
>
>
>
>
>
>  -----Original Message-----
>  From: samba-bounces+dmcleod=foranyauto.com at lists.samba.org
>  [mailto:samba-bounces+dmcleod=foranyauto.com at lists.samba.org] On Behalf Of
>  Ryan Steele
>
> Sent: Monday, March 24, 2008 4:19 PM
>  To: samba at lists.samba.org
>
>
> Subject: Re: [Samba] Desktops for non-roaming profiles
>
>  Hi Dennis,
>
>
>  Dennis McLeod wrote:
>  > Are you trying to use the EXISTING profile on the machine?
>
>  Yeah...
>
>  > It's not going to be as seamless as you would like.
>  >
>
>  Darn.  :-)
>
>  > Basically, you will have to sit in front of each machine, join it to
>  > the domain, log in as the user into the domain to create the local
>  > profile), reboot (to free up the user profile - logging out doesn't
>  > work), log in as administrator, look at c:\documents and settings to
>  > get the name of the new profile (usually the username appended with a
>  > .domainname), then right click on My computer, properties, advanced,
>  > user profiles, highlight the old profile, copy to button, point it at
>  > the new user profile, change permissions to the new user (or if it's a
>  generic profile, use "everyone").
>  > Then, log back out, and in as the NEW domain user, and see what you get.
>  >
>
>  It does seem to copy the desktop items (and probably other things as well),
>  but drops me in to C:\, and I get weird behaviors.  It's unable to load the
>  Windows Classic theme (I get the error "The theme could not load.
>  Unspecified error."), and exhibits odd behaviors (loading the XP theme turns
>  the XP theme off, for example).  The permissions look right to me...
>
>  > It will not copy cookies or passwords (Outlook) so those will need to
>  > be fixed.
>  >
>
>  How about background, appearance, etc.?  None of those are preserved in my
>  tests, though it probably has to do with the aforementioned problem
>  (defaulting to C:\).
>
>  > Microsoft has a user migration tool which is supposed to do this, but
>  > it doesn't work, IMHO.
>  >
>  > I chose to migrate a few, and rebuild a few. It might take me a year,
>  > but they'll get moved, eventually.
>  >
>  > Also, I had to set local machine policy to "Only allow local profiles"
>  > and "Prevent Roaming profile changes from Propagating to the server":
>  >
>
>  Yeah, that helped.
>
>  > Start, Run, gpedit.msc, "Computer Configuration", "Administrative
>  > Templates", "system", User Profiles".
>  > registry string:
>  >
>  > Windows Registry Editor Version 5.00
>  >
>  > [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\System]
>  > "LocalProfile"=dword:00000001
>  > "ReadOnlyProfile"=dword:00000001
>  >
>  >
>  > This might be why it's going to \TEMP. XP want's to pull down a
>  > roaming policy, but there exists none.....
>  >
>  >
>
>  I think that may be the case as well.
>
>  > If that's the case I would suspect you won't have the second
>  > (.domainname) profile in c:\documents and settings....
>  >
>
>  Until I changed those two entries, you're right I didn't.
>
>  >
>  > If you have a local user named bob, and a domain user named bob, and
>  > bob already has a local profile, if you log into the domain as bob,
>  > you should get a second profile named bob.domainname......
>  >
>  >
>  > HTH,
>  > Dennis
>  >
>  >
>  > Here's another reference:
>  > http://groups.google.com/group/linux.samba/msg/9c8b4de804545326
>  >
>  >
>  >
>
>  That didn't seem to fly for me either.
>
>  I'm interested to hear what you think with regards to it dropping me to C:\.
>  The user DOMAINNAME\bob has privileges to access C:\Documents and
>  Settings\bob.DOMAINNAME, which I overwrote with the existing profile using
>  the Windows profile copy mechanism.
>
>  Thanks for your assistance thus far.
>
>  Ryan
>  --
>  To unsubscribe from this list go to the following URL and read the
>  instructions:  https://lists.samba.org/mailman/listinfo/samba
>
>  --
>  To unsubscribe from this list go to the following URL and read the
>  instructions:  https://lists.samba.org/mailman/listinfo/samba
>