[Samba] Move from roaming to local profiles

[Donny Brooks]

On Wednesday, January 9, 2013 04:23 PM CST, "Donny Brooks" <dbrooks at mdah.state.ms.us> wrote: 
 
>  
>  
>  
> On Wednesday, January 9, 2013 04:13 PM CST, Norberto Bensa <nbensa+samba at gmail.com> wrote: 
>  
> > On Wed, Jan 9, 2013 at 6:57 PM, Donny Brooks <dbrooks at mdah.state.ms.us> wrote:
> > >
> > > Ok, I tested this on a couple of our windows 7 machines. I did as you said and changed the profile to a local one, removed it from the existing domain, added it to the new domain, and logged in as the user again. It gave me a new profile. Looking in C:\Users I see the username folder and username.NEWDOMAIN. It is creating a new profile for the same user on the new domain. Is there a way to do this? I have searched but only see directions for doing local profiles to roaming. Figures I would be going against the grain here.
> > 
> > Add the machine to the new domain. Change permisions on the username
> > folder. Also, you'll need to load the user's registry and change
> > permissions. I really can't remember if you also need to change
> > something else in the user's registry. I'll ask our technicians
> > tomorrow and I'll let you know.
> > 
> > BTW, the same username in two domains is a different user (different
> > SID). That's why you see username.NEWDOMAIN.
> > 
> > Regards,
> > Norberto
>  
> Thanks for that. I tried changing the permissions on the folder but totally forgot about the registry. Also I tried the program "reprofiler" as it is supposed to automate alot of this but I couldn't get it just right either. 
> -- 
> 
> Donny B. 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
 
I spent all day yesterday on this and never got anywhere until just before I left work. I tried everything I could think of and every way of doing it. Here is just one way of what I tried:

1. Log in as user on old domain, verify stuff works
2. Log out and in as local administrator
3. Change from olddomain to newdomain, reboot
4. Log in as user on newdomain, creates new profile (obviously since it is a "new user")
5. Reboot to make sure profile is not locked and log in as local administrator
6. Copy contents of olddomain profile over to newdomain folder
7. Change permissions recursively on newdomain profile folder and NTUSER.DAT to allow newdomain user full control
8. Reboot
9. Log in as user, profile is there but no file on desktop is able to be opened. Also could not open Windows Explorer.

Finally what worked for me was after step 4 I would navigate to C:\Users\oldprofile as the user on the newdomain, with administrator escalation of course, and copy over only the contents of the specific folders I wanted. For instance the contents of Desktop, certain folders out of AppData/Roaming, etc. This seems to have worked so far. The only issue is that they lose their customizations to windows. But that is not a huge deal.

This is just so if anyone else has these problems in the future. 
-- 

Donny B.