AD: Group Policy question

Gott

Supreme [H]ardness
Joined
Feb 28, 2008
Messages
4,958
I haven't worked too in depth with GP so here's my question and dilemma.

We have a user who logs onto their laptop as a local user, but can access our intranet. Due to circumstances that I can't figure out... installing CRM on her machine but wants her to be in a domain so I "Run as..." the domain admin and it still doesn't work while it works on my machine... so we decided we're going to have her join our domain. But one problem we're foreseeing is that she'll have a new profile created as hername.DOMAIN, effectively having her start over with a new profile.

I briefly played with copy User Profiles from one to another but would rather use Group Policy if I can. Basically what I want to happen is when she logs onto the domain that her existing local profile and all of her settings get used rather than a new domain profile be created.

Is this possible with GP or do I have to use the User Profiles feature in Windows XP to copy all of her settings over?
 
You can either do a profile copy to her new profile or do the registry edit to tell her new login to use the old profile. Let me find it for you.

Edit: Here's the article: http://support.microsoft.com/kb/314045

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows NT\CurrentVersion\ProfileList

When you browse to this in the registry, you'll see a list of sids. You can go through the list and see which one has the current %SystemDrive%\Documents and Settings\USERNAME.DOMAIN in the ProfileImagePath. You want to copy the data from the one that is in the ProfileImagePath of %SystemDrive%\Documents and Settings\USERNAME, this should be the one from before they joined the domain. Make sure you give the domain account rights to that entire directory.
 
So there's really no way of doing it through GP?

I'll give your suggestion a shot on our test environment.

Thanks.
 
So there's really no way of doing it through GP?

I'll give your suggestion a shot on our test environment.

Thanks.

You can redirect with group policy, but you're not going to be able to redirect for a specific user, unless you create a specific policy just for that computer/user.

http://www.forensit.com/profwiz/index.htm

This will also do the same thing in a more automated way.

Another thing to do is setup roaming profiles and put the users profile out on a network share.
 
You can redirect with group policy, but you're not going to be able to redirect for a specific user, unless you create a specific policy just for that computer/user.

http://www.forensit.com/profwiz/index.htm

This will also do the same thing in a more automated way.

Another thing to do is setup roaming profiles and put the users profile out on a network share.
Great, thanks for your help. :)
 
Back
Top