ForensiT Homepage
Forum Home Forum Home > ForensiT Support > Domain Migration
  New Posts New Posts RSS Feed - Migrated accounts not working properly with GPO.
  FAQ FAQ  Forum Search   Events   Register Register  Login Login

Migrated accounts not working properly with GPO.

 Post Reply Post Reply
Author
Message
FiliP View Drop Down
Newbie
Newbie


Joined: 01 Jun 2021
Status: Offline
Points: 3
Post Options Post Options   Thanks (0) Thanks(0)   Quote FiliP Quote  Post ReplyReply Direct Link To This Post Topic: Migrated accounts not working properly with GPO.
    Posted: 01 Jun 2021 at 7:32pm
Hi.
I have big problem with migrated users.
1. I have Active Directory, new user created in AD.
2. Then i migrate local user to new user in domain. No errors. All looks fine but...
3. If for ex I add domain user to any domain group, user on computer (migrated one) still have same privilages.

Nothing changes after restart, logout/login, gpforce /update etc. He will always have same privilages from time when he was migrated. Its like GP is no in sync with compute&user<=>server. Change will set only when i take out computer from domain and add it again. I thing "domain admin account" set in Profile Wizard doing sync in that time.

I've checked it on second computer, the same resoult. But if i use clean new domain user - not migrated one, its all ok, policies from server working and updating normaly. Only migrated are not usable.

So... what happening?
Back to Top
Support View Drop Down
Moderator Group
Moderator Group


Joined: 09 Nov 2006
Location: United Kingdom
Status: Offline
Points: 1843
Post Options Post Options   Thanks (0) Thanks(0)   Quote Support Quote  Post ReplyReply Direct Link To This Post Posted: 03 Jun 2021 at 2:09pm
User Profile Wizard only effects file and folder permissions in the local user profile on the workstation, usually C:\Users\username. In cannot have any effect on domain user accounts or permissions granted through domain groups. (Group permissions are not enforced through Group Policies.)
Back to Top
FiliP View Drop Down
Newbie
Newbie


Joined: 01 Jun 2021
Status: Offline
Points: 3
Post Options Post Options   Thanks (0) Thanks(0)   Quote FiliP Quote  Post ReplyReply Direct Link To This Post Posted: 03 Jun 2021 at 4:28pm
This is not the case or i dont understand (eng is not my first language).

Any profile migrated by Profile Wizard will not get any update configuration from Global Policies. Maybe my example was wrong for you, but that was first obvious effect (gpresult /r didnt change on client side). Its all ok on the server.

Real expample: I was mapping drive letter by GPO and making link to it on domain user desktop.

Migrated by PW user didnt get mapped leter on his computer. gpresult didnt show policy is applyed etc.
Not migrated ones working fine.

So, there is any next steps to make after mirating user to domain by Profile Wizard?

Windows Server 2019


Edited by FiliP - 03 Jun 2021 at 4:28pm
Back to Top
 Post Reply Post Reply
  Share Topic   

Forum Jump Forum Permissions View Drop Down

Forum Software by Web Wiz Forums® version 12.03
Copyright ©2001-2019 Web Wiz Ltd.

This page was generated in 0.046 seconds.