Geekly Articles each Day
📜 ⬆️ ⬇️

Transferring settings when users turn on the computer to a new domain.

On one “fine” day, your domain falls down or AD shamelessly fails and an understanding comes that it is time to rearrange it. In principle, reinstalling DC takes very little time relative to switching and reconfiguring all computers and accounts.
So there is a way to save time. It is possible to transfer a user account with almost no losses with minimal time costs.
Go
1 Remember the name of the account, for example username, and switch the machine to a new domain, in one of the reboots, rename the account to username_, if the new one is with the same name. (When you switch, do not forget to make sure that there is access to the local admin).
2 Come under the username in the new domain, in Documents and settings now there are username and username_ (our old account).
3 Reboot, sometimes it is enough to end the session, as long as the ntuser.dat file is unloaded.
4 Go to Domai Admin, delete Documents and settings \ username and rename username_ to username.
5 Now the most interesting thing: in the security tab, we give full access to the username folder, username, go in additionally and select the checkbox — replace permissions for all child objects ... if you can smoke a large account, drink tea or do the next computer.
6 The next step is to give the rights to the registry branch with user settings. They are stored in the ntuser.dat file. Run regedit.exe, get up
on the HKLM branch, go to File-load Hive / File-load the hive, go to Documents and settings \ username select the file ntuser.dat. When it is connected, we press the RMB on the appeared branch and go into the permissions, we give there full access to the user username, similarly to p. 5, upon completion of the process we unload the hive. Reboot.
7 Go under the username and enjoy (I hope).
PS For about a year I have been using this method, usually everything goes smoothly even a desktop picture remains and different passwords, only in paragraph 6 sometimes a message will appear that the rights could not be applied, but the result is not affected. Recently I came across the User Profile Wizard 3.0 program www.forensit.com/domain-migration.html , but I haven’t been able to test it yet.

')

Source: https://habr.com/ru/post/54514/

More articles:


All Articles