Windows Forum

Ask something
Discussion Locked

Profile Copying

0 helpful
18 replies

by andrew.gough

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Trying to move an XP laptop, from workgroup, into a domain. Set up domain user on the laptop, and an admin account. Tried to use the admin account, under system properties to copy the profile from the old user, to the new domain user ... BUT!, I get an error to say it cannot set the security privaledges.

Have googled for this and found questions, but no answers!, any thoughts?

18 replies

by w2ktechman

It is because you copied the entire profile. This is a bad idea as it also copies ntuser.dat, ntuser.log, and other local files into the domain user account.
Instead, only some files/folders should be copied. Here are the folders that I would copy
Desktop
Faxorites
My Documents
Local settings\Application data

by andrew.gough

But how do you copy individual folders from the user profile settings in XP?, it doesn't work as it leads to a headache of permissions settings if the workstation is locked down.

Using the profile copy under system properties *should* work, and infact does work, as I've used it on two other XP Pro machines with no problems?

by w2ktechman

Sorry, I misread, I thought that you just copied the profile into the new profile and then got errors.
Anyway, It sounds like there is a policy set on the system, or maybe it needs to be re-added to the domain. If you have done it with others on the domain, then it is not a network policy.
However, maybe the local permissions access is much different than the new user. If so, give the new user admin access and then switch it back after the profile is copied.

by andrew.gough

Poster rated this answer.
Sorry, should have mentioned, I have already set all accounts to be administrators to try to negate the permissions as an issue.

by p.j.hutchison

When copying profiles, you must login as a different user as the one being copied.

Make sure the domain user logins it at least once to create an initial default profile in c:\documents and settings then do the profile copy afterwards.

Also, when copying profile you must set the 'Permitted to use' to the domain account using that profile otherwise you will get permission errors.

by andrew.gough

Poster rated this answer.
I'm trying to copy a local workgroup profile, to a local profile for a domain account. I've tried setting the 'permitted to use', but it will only allow me to set this to local users (not the domain account I want to copy to). It will not allow me to change the 'Locations' to the domain, and if I add the domain\ qualifier at the start, it doesn't allow because the 'location' is set to the local machine.

by p.j.hutchison

You need to add your domain account to the local ADminstrators account to do what you require.
See Computer Management, Local Users and Groups.

The computer must be joined to the domain as well!

by andrew.gough

Poster rated this answer.
The computer is joined to the domain, and we have tried loggin in as a local admin. We have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

Thanks for the help

by andrew.gough

Poster rated this answer.
The computer is joined to the domain, and we have tried loggin in as a local admin. We have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

Thanks for the help

by schuylkill

You could try copying the local profile to the Default User profile. You would then delete the domain user profile and log in.

by andrew.gough

Poster rated this answer.
Thanks for the help, but we have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

by andrew.gough

Poster rated this answer.
Thanks for the help, but we have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

by andrew.gough

Poster rated this answer.
Thanks for the help, but we have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

by andrew.gough

Poster rated this answer.
Thanks for the help, but we have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

by xt john

Where domain issues are concerened, we usually need to disjoin from the domain, log on as a local administrator, (make sure you have unhidden all files under folder options), rename the domain users folder in Documents and Settings to userold. Rejoin the PC to the Domain. Log on as the domain user, a new folder for that user is created. Log off and on as administrator. Copy all from the userold file to user file. Is there an easier way to do this? probably several. Does this way work every time AND get rid of all those Domain log on errors, etc.? It has for us every time! This is usually caused by a SID problem, the Domain cannot set up the proper security settings between the server and pc. Check this link:
http://www.tek-tips.com/viewthread.cfm?qid=1105128&page=2

by andrew.gough

Poster rated this answer.
I believe this would work in the future, however we have now found a MS tool (USMT) to migrate the settings, and this has so far proved successful.

This discussion is closed to new replies.