Using GPO to run logon script |
Post Reply | Page 12> |
Author | |
hsofteng
Newbie Joined: 26 Mar 2014 Status: Offline Points: 8 |
Post Options
Thanks(0)
Posted: 26 Mar 2014 at 9:10am |
Hi,
I'm trying to migrate all profiles on all pc's/laptop's to a new domain. I have followed the user guide and have created a vbs and config file - I've added all files to Group policy and told it to run the vbs file, but nothing seems to happen. What am I doing wrong? |
|
Support
Moderator Group Joined: 09 Nov 2006 Location: United Kingdom Status: Offline Points: 1860 |
Post Options
Thanks(0)
|
Hi,
The general guidelines are as follows: 1. Use a single deployment file rather than using separate migration files (Migrate.vbs, Profwiz.config, etc.) 2. Run the migration from a computer Group Policy not a user group policy. Because of this... 3. The migration will run under the SYSTEM account so make sure <LocalAdmin> and <LocalPwd> are blank in Profwiz.config |
|
hsofteng
Newbie Joined: 26 Mar 2014 Status: Offline Points: 8 |
Post Options
Thanks(0)
|
Thanks for this information - so apparently the script has now run but I'm still only seeing the original users - not users for the new domain. How can I tell if the script has run properly?
|
|
hsofteng
Newbie Joined: 26 Mar 2014 Status: Offline Points: 8 |
Post Options
Thanks(0)
|
The log is showing the following..
Licensed to S***** Ltd (50 Seats) Serial No. 917F2A69 Copyright (c) 2002-2013 ForensiT Ltd www.ForensiT.com The migration service already exists. Starting migration service... Done. Machine is not joined to the OLDNAME domain. Attempting to resolve user SID... Fails. Attempting to resolve user SID... Fails. Attempting to resolve user SID... Fails. Attempting to resolve user SID... Fails. Finding Domain Controller for domain NEW.domain... Done. Using Domain Controller: \\server.NEW.domain. Binding to Active Directory... Done. Joining to domain "NEW.domain" ... Fails. Error 1219. Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again. No OLDNAME domain account profiles were found. Migration Fails. Edited by hsofteng - 27 Mar 2014 at 8:27am |
|
Support
Moderator Group Joined: 09 Nov 2006 Location: United Kingdom Status: Offline Points: 1860 |
Post Options
Thanks(0)
|
The migration needs to be run from a Group Policy on the old domain.
|
|
hsofteng
Newbie Joined: 26 Mar 2014 Status: Offline Points: 8 |
Post Options
Thanks(0)
|
I thought profwiz didn't need access to the old domain?!
I have the new server in a test environment with one laptop from the old domain - the old domain controller is not available. |
|
Support
Moderator Group Joined: 09 Nov 2006 Location: United Kingdom Status: Offline Points: 1860 |
Post Options
Thanks(0)
|
User Profile Wizard does not need access to the old domain to migrate the profile, but some deployment methods are more appropriate than others given different scenarios.
If you really want to use a Group Policy from the new domain, you will need to use a custom migration script. See the "EnumSIDs.vbs" script in the Sample Migration Scripts collection on the Support Downloads page. You will need to modify the script for your own environment - see the Readme file. |
|
hsofteng
Newbie Joined: 26 Mar 2014 Status: Offline Points: 8 |
Post Options
Thanks(0)
|
Ok, so I've edited the enumSIDs.vbs and put that in the startup script folder along with the .exe and the .config file.
This is what I now get from the log file ForensiT User Profile Wizard v3.7.1190 Licensed to S***** Ltd (50 Seats) Serial No. 917F2A69 Copyright (c) 2002-2013 ForensiT Ltd www.ForensiT.com Creating migration service... Done. Starting migration service... Done. Machine is not joined to the oldname domain. Finding Domain Controller for domain new.domain... Done. Using Domain Controller: \\server.new.domain. Binding to Active Directory... Done. Joining to domain "new.domain" ... Fails. Error 1219. Multiple connections to a server or shared resource by the same user, using more than one user name, are not allowed. Disconnect all previous connections to the server or shared resource and try again. Migration Fails. |
|
Support
Moderator Group Joined: 09 Nov 2006 Location: United Kingdom Status: Offline Points: 1860 |
Post Options
Thanks(0)
|
The are two things that are immediately obvious from the log. Firstly, User Profile Wizard did not attempt to migrate any profiles, so you have either not configured your script correctly or not configured your Profwiz.config file correctly. (Is <All> set to true in Profwiz.config? It needs to be.) Secondly, User Profile Wizard is trying to join the machine to the new domain. There is no need to do this - do you have <ForceJoin> set to 'True'? (It should not be.)
|
|
hsofteng
Newbie Joined: 26 Mar 2014 Status: Offline Points: 8 |
Post Options
Thanks(0)
|
<all> is set to false in profwiz.config - as instructed by the readme.pdf about using EnumSIDs.vbs and yes I did have <ForceJoin> set to True but surely it would ignore that anyway if it was already joined to the domain?
|
|
Post Reply | Page 12> |
Tweet
|
Forum Jump | Forum Permissions You cannot post new topics in this forum You cannot reply to topics in this forum You cannot delete your posts in this forum You cannot edit your posts in this forum You cannot create polls in this forum You cannot vote in polls in this forum |