Profiles Problem

[Guest]

Profile Problem

I have a slight problem with all the users and there profiles on my network.
Basically my server crashed 2-3 months ago and I had to build a new server,
at this time I decided to move from sbs to server 2003 instead of going back
I thought might as well go forward and do this all at the same time (I had
out grown sbs and needed to upgrade anyways).

I manually created all my user accounts and restored the exchange, I then
restored all the users profiles.

When the users log on certain things don’t work, policies don’t work, they
can’t access outlook (says cannot start MS outlook), mapped drives don’t
appear, basically there are a number of issues.

I found out that it is because I created the accounts then restored the
profiles and they don’t link, the SID will be diff etc etc etc

When I get new users they are fine it’s just old users. I have fixed this
problem in a bad way but for now it’s got rid of the issue, I added all the
users to the Domain Admins group so now when they log on all works fine.

My urgent question is this, can I somehow re-create all the NTuser.dat for
all users, the only other way to do this would be to rename the old profile,
log on with a new, log out, copy the ntuser.dat from the new to the old,
delete the new profile folder and then rename the old back to it’s correct
name. This is a monstrous job to do for the amount of people it is for!

Anyone any ideas, I’m at my wits end lol

Thanks

 

[Mark V]

Profile Problem

I have a slight problem with all the users and there profiles on
my network. Basically my server crashed 2-3 months ago and I had
to build a new server, at this time I decided to move from sbs to
server 2003 instead of going back I thought might as well go
forward and do this all at the same time (I had out grown sbs and
needed to upgrade anyways).

I manually created all my user accounts and restored the exchange,
I then restored all the users profiles.

When the users log on certain things don’t work, policies
don’t work, they can’t access outlook (says cannot start MS
outlook), mapped drives don’t appear, basically there are a
number of issues.

I found out that it is because I created the accounts then
restored the profiles and they don’t link, the SID will be diff
etc etc etc

When I get new users they are fine it’s just old users. I have
fixed this problem in a bad way but for now it’s got rid of the
issue, I added all the users to the Domain Admins group so now
when they log on all works fine.

My urgent question is this, can I somehow re-create all the
NTuser.dat for all users, the only other way to do this would be
to rename the old profile, log on with a new, log out, copy the
ntuser.dat from the new to the old, delete the new profile folder
and then rename the old back to it’s correct name. This is a
monstrous job to do for the amount of people it is for!

I'll leave the specifics to those with more first-hand experience
with such situations. And having only given brief thought to this so
far.

In general you have two issues:
File system ACLs
Registry ACLs

The MS subinacl (or 3rd-party SetAcl) tools may be of assistance in
either area perhaps. The largest issue as I see it is that for each
user account both user registry hive files on disk need to be
"loaded" in order to change the ACLs. That could be daunting and
complex. You (most likely) cannot just copy the DAT files to a new
profile tree.

Start by loading a (old) ntuser.dat file and examining the ACEs.

You did not say if these were Domain accounts and if the same Domain
(SID) still exists. My supposition is that one or both these
conditions are not true.

Perhaps others will have better suggestions or methods. Or I may be
ignorant of "standard practices" available to help recover from this
situation.