Problems with user accounts

[Guest]

Greetings all,

My company is adding a suffix to the domain currently running on my W2K
server. The server is already configured and running fine for several months.
However, several of the users, a mix of 2000 Pro and XP, are still listed as
members of the old domain. When I try to join them to the new domain, the
preferences of their user acount changes back to the default settings. We
have 2 proprietory programs that currently run on the old user account fine,
but have to be completely reconfigured after joining them to the new domain.
They are a major pain.

How can I keep the old settings from the previous user accounts and pass
them onto the new user account that Windows creates when I join the new
domain?

 

[Dave Patrick]

You can use the Copy To function to mirror the profile. Create the new
account. Logon with the new account at least once. Then while logged on as
another user (with administrative rights) Control Panel|System|User
Profiles, select your olduser, Copy To, Browse to
%systemdrive%\Documents and Settings\newuser
Change "Permitted to use:" to "newuser" OK.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Greetings all,
|
| My company is adding a suffix to the domain currently running on my W2K
| server. The server is already configured and running fine for several
months.
| However, several of the users, a mix of 2000 Pro and XP, are still listed
as
| members of the old domain. When I try to join them to the new domain, the
| preferences of their user acount changes back to the default settings. We
| have 2 proprietory programs that currently run on the old user account
fine,
| but have to be completely reconfigured after joining them to the new
domain.
| They are a major pain.
|
| How can I keep the old settings from the previous user accounts and pass
| them onto the new user account that Windows creates when I join the new
| domain?

 

[Guest]

Thanks Dave!
On a test computer this looks like it will work just fine. However, during
the course of this fix I came about a new problem.

When I joined to the new domain (which was successful) I tried to logon
under the domain admin acoount. I received a message that I could not logon
locally. I have had this problem with one 2000 box in the past, but no XP
boxes seem affected. I solved the problem by creating a new folder in my AD
and giving it a GPO that allowed local logons and placed the computer account
in this folder.

I am going to assume that I will have more of this type of problem as I join
these accounts to the new domain. I cannot see any deny policies in place -
most are not enabled at all. Any clue why this is happening?

BTW, the client account is a domain user account that all 20 users in the
network will use to logon, but I can't logon as Admin either. I suppose I can
add all the W2K computers into the new folder with the GPO before I start to
join them.

I would also like to speed up the logon process after joining. Is there any
way to speed up the activation of the GPO in the AD?

 

[Dave Patrick]

You might take another look at;
Computer Configuration\Windows Settings\Local Policies\User Rights
Assignment
Allow log on locally
Deny log on locally

As far as speeding things up I really have no idea.

--
Regards,

Dave Patrick ....Please no email replies - reply in newsgroup.
Microsoft Certified Professional
Microsoft MVP [Windows]
http://www.microsoft.com/protect

:
| Thanks Dave!
| On a test computer this looks like it will work just fine. However, during
| the course of this fix I came about a new problem.
|
| When I joined to the new domain (which was successful) I tried to logon
| under the domain admin acoount. I received a message that I could not
logon
| locally. I have had this problem with one 2000 box in the past, but no XP
| boxes seem affected. I solved the problem by creating a new folder in my
AD
| and giving it a GPO that allowed local logons and placed the computer
account
| in this folder.
|
| I am going to assume that I will have more of this type of problem as I
join
| these accounts to the new domain. I cannot see any deny policies in
place -
| most are not enabled at all. Any clue why this is happening?
|
| BTW, the client account is a domain user account that all 20 users in the
| network will use to logon, but I can't logon as Admin either. I suppose I
can
| add all the W2K computers into the new folder with the GPO before I start
to
| join them.
|
| I would also like to speed up the logon process after joining. Is there
any
| way to speed up the activation of the GPO in the AD?