Removed computer form AD need user profile
-
Yeah it should work to migrate the users profile from a domain profile to a workgroup (or domain to domain).
I just double checked.
-
The profiles will still be there after you remove the computers from the domain.
But when they log back in (as a local user), a new profile will be created.
If they have local admin priviliges, they'll be able to copy their crap over to their new profile. Or you have to do it as local admin if they can't.
or
Create a new local user account for them before you remove it from the domain, and copy their crap to it first. But you'll need to log in as the new local user first before it's created so you have somewhere to copy their stuff to.
-
@tim_g yea I wouldn't do that. I'd just let ForensIT do all the work and create a user profile and migrate all of the data.
It literally takes seconds. ..
-
+1 for ForensIT (Tranzwiz). It will allow you to "convert" a profile from local to domain, domain to another domain and even show unassigned profiles. I would imagine it can convert from domain to local too.
-
Which version of this program? Do I need to buy it?
-
@jaredbusch said in Removed computer form AD need user profile:
Which version of this program? Do I need to buy it?
It's free for personal use.
-
@jaredbusch said in Removed computer form AD need user profile:
Which version of this program? Do I need to buy it?
If you are just keeping the clients as they are and just need to adjust the profiles, this is the one you want - http://www.forensit.com/domain-migration.html
If you are setting up new systems and want to migrate a profile to a new system, you would use this one-
http://www.forensit.com/move-computer.htmlTranzwiz (second option) is free for personal use but only 79.95 for pro, per tech.
-
@black3dynamite said in Removed computer form AD need user profile:
@jaredbusch said in Removed computer form AD need user profile:
Which version of this program? Do I need to buy it?
It's free for personal use.
This doesn't sound like personal use at all... so I don't know wtf Dustin is pushing this.
-
I've done this a time or two...
- Unjoin computer from AD... Reboot
- Log in as admin, create NEW user account with same username as AD username
- Grant new user account full control on the C:\Users\username folder.
- Reboot, and Login as new user. All their stuff should still be there.
-
@tim_g said in Removed computer form AD need user profile:
@black3dynamite said in Removed computer form AD need user profile:
@jaredbusch said in Removed computer form AD need user profile:
Which version of this program? Do I need to buy it?
It's free for personal use.
This doesn't sound like personal use at all... so I don't know wtf Dustin is pushing this.
$90 is pretty reasonable for the amount of time it could save. This is the biggest hassle in domain migrations/removals.
-
@dafyre said in Removed computer form AD need user profile:
I've done this a time or two...
- Unjoin computer from AD... Reboot
- Log in as admin, create NEW user account with same username as AD username
- Grant new user account full control on the C:\Users\username folder.
- Reboot, and Login as new user. All their stuff should still be there.
What about the SID in the profilelist reg key?
-
@wrx7m said in Removed computer form AD need user profile:
@dafyre said in Removed computer form AD need user profile:
I've done this a time or two...
- Unjoin computer from AD... Reboot
- Log in as admin, create NEW user account with same username as AD username
- Grant new user account full control on the C:\Users\username folder.
- Reboot, and Login as new user. All their stuff should still be there.
What about the SID in the profilelist reg key?
I don't recall ever having to muck around in the registry to fix it. It's been a while since I had to do it.
-
@tim_g said in Removed computer form AD need user profile:
@black3dynamite said in Removed computer form AD need user profile:
@jaredbusch said in Removed computer form AD need user profile:
Which version of this program? Do I need to buy it?
It's free for personal use.
This doesn't sound like personal use at all... so I don't know wtf Dustin is pushing this.
I didn't say steal it...
-
@wrx7m said in Removed computer form AD need user profile:
@dafyre said in Removed computer form AD need user profile:
I've done this a time or two...
- Unjoin computer from AD... Reboot
- Log in as admin, create NEW user account with same username as AD username
- Grant new user account full control on the C:\Users\username folder.
- Reboot, and Login as new user. All their stuff should still be there.
What about the SID in the profilelist reg key?
That is what ForensiIT does in the background.
-
USMT would have been great for this:
https://docs.microsoft.com/en-us/windows/deployment/usmt/usmt-overview
But this should work
https://support.microsoft.com/en-us/help/2454362/renaming-a-user-account-does-not-automatically-change-the-profile-path
or
https://morgansimonsen.com/2008/06/10/how-to-manually-transfer-a-user-profile-from-one-user-to-another-2/ -
I just took some computers from no AD to AD. The USMT even grabbed their wall paper. The commands were:
scanstate.exe c:\USMT /uel:30 /i:migapp.xml /i:migdocs.xml /localonly /ui:"sarah" loadstate.exe c:\USMT /i:miguser.xml /i:migapp.xml /MU:"sarah":"ad.domain.com\ssmith"You would be doing the reverse of that, but the /MU switch is the one that changes the account type. One that that I noticed is that it seemed to be scanning the entire hard drive looking for docs placed outside the user folders. Since it was going right back down to the same machine, I didn't need that, since it took extra time. If anyone knows what is needed to avoid that, please share.
-
@dbeato said in Removed computer form AD need user profile:
@wrx7m said in Removed computer form AD need user profile:
@dafyre said in Removed computer form AD need user profile:
I've done this a time or two...
- Unjoin computer from AD... Reboot
- Log in as admin, create NEW user account with same username as AD username
- Grant new user account full control on the C:\Users\username folder.
- Reboot, and Login as new user. All their stuff should still be there.
What about the SID in the profilelist reg key?
That is what ForensiIT does in the background.
Right, I know that. I was asking about when dafyre said he used to do it manually with the steps he outlined.
-
I've have used that ProfileWiz before by ForensiT, works really well.
