[Samba] Migrating Roaming Profiles to Samba4

[Chris Hayes]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi,

I'm about to migrate a load of profiles from an old Windows DC to our
new Samba4 DC (well, the file server is Samba 3.6.6).

Could anyone advise me on how to go about migrating these across. As
I've noticed that just shifting the profile data from the old domain
to the new one doesn't appear to work for non-Xp profiles (and for all
I know, I may have just been lucky for those couple that worked
without tinkering).

The tool 'profiles' in the Samba3 tool kit claims to assist with
migrating profiles by replacing SIDs in registry files, specifically
the domain SID in ntuser.dat. However, my understanding is that this
file may contain lots of SIDs (i.e. domain SID, user SID, group SIDs,
etc.) and from all I've read it's just mentioned the domain SID. Can
anyone elaborate on this??

Another tool I've found (that appears to work in my test environment)
is forensit.com's Transwiz tool; this is operated through logging into
each workstation as an administrator, and then the tool guides you
through choosing a local profile (the cached remote profile) to copy
over to the new domain, with a specified new user. Has anyone had any
experience of using this tool?

Ideally I'd like to use a tool like profiles; something that I feel I
could fully understand, rather than a black box like Transwiz.

If anyone could shed some light on this I'd really appreciate it!!

Kind regards,
- -- 
Chris Hayes, Systems Administrator
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/

iQEcBAEBAgAGBQJSC77iAAoJELgO0A8EguAKWXEH/3oUt2M+o0Ns9Qu4TA++bOMf
xlZAVrNMsysPxiksJTDfBHYbAWpp8XGyPV9zUJ8ot8458/qKu00rdo0OAuhVk7Dp
E2WKoyXtPdFBlHjXK5wwxPnhY0lcVT5Udie065jJdUnnUNOiX4G0rnMw5MNVzzZz
Zfa2pA49Bkqnom8xKCG+kdAfzWfbkrKn6oJorMRrs7sO5zd5j6XWQ0qox8NXA97n
iAGERxhqhJtoL6RgppDOSJEXBGqD9pxabt3bo/F0kGhxH1JVPcK2A5IDsQpxr+S6
6u4PoXAfwAEmOcAjlPkA5kf9oeBMco3sMwQrEZMateu+8wP/zrvgOtwYlpuLlHg=
=vJRJ
-----END PGP SIGNATURE-----