ADMT migrate users and preserve profile

I'm testing an Interforest migration using ADMT 3.2 on Windows 2008 servers. I have a one-way trust established. I'm able to successfully move user accounts and computer accounts. I'm running into problems with preserving the users profile. I'm doing the
following steps
1. Migrate User Account to new target domain
2. Migrate Computer Account to new domain
3. Run Security Translation Wizard with the User profiles & groups selected
When I login with my migrated user account to the new domain, it creates a new profile, instead of using the profile from the source domain. What am I missing?

Hello Matthew
I would like to point out a few things from my recent/ongoing experience with ADMT:
When ADMT performs the SECURITY TRANSLATION on files/folders/registry etc., it looks for accounts in its LOCAL DATABASE(SQL Express) and not in AD directly.
This means if an account is migrated using ADMT on SERVER1, that will only be present in the database of SERVER1.
If we migrate the computer account using SERVER2, then in the AGENT DETAIL it says:
Files - 100
Changed - 0
Unchanged - 100
i.e. NO SECURITY TRANSLATION AT ALL and therefore A NEW PROFILE CREATED
BEST PRACTICE - use only 1 ADMT server in the environment
On Santhosh's portal there is a comment:
vadimp
says:
May 30, 2010 at 5:02 AM Reply
Not always change profileimagepath value is enough: if new profile is a result of ADMT mistake, then you must also add new SID ACL to old user profile folders and to
NTUSER.Dat Hive in regedit. I obscure this ADMT v3.0 mistake when many users have profiles on the same PC
http://portal.sivarajan.com/2010/04/workstation-profile-migration.html
I can't find out NTUSER.DAT HIVE in REGISTRY
I would like to know what makes the user retain the profile?
How can I ensure that the users retain their profile when they logon to the TARGET domain for the 1st time.
Changing the Registry is a REACTIVE STEP, user raises an incident - and we address it.
But how can we prevent it?
I wish someone could tell me a way, even if it is manual, but atleast ensures that no NEW PROFILES are created.

Similar Messages

Change Request Management users and their profiles

Hello!
I would like know which users are useful for the usage of change request management functionality within SAP Solution Manager and which profiles should they have?
Users: Requester, Service Desk Empl., Change manager, Change advisory board(?), Developer, Tester, IT Operator, Administrator(?)
Profiles: SAP_SOCM_REQUESTER, SAP_CM_DEVELOPER_COMP, SAP_CM_CHANGE_MANAGER_COMP, SAP_CM_TESTER_COMP, SAP_CM_PRODUCTIONMANAGER_COMP, SAP_CM_ADMINISTRATOR_COMP,
SAP_CM_OPERATOR_COMP
The problem I have:
I get the errors (s. bellow), when I try to set correction in Development with development profile.
<b>- you are not authorized to perform the activity selected last
- No maintenance cycle is open for the current system</b>
The solution for this problem is to log in with user who has "SAP_ALL" to recheck
the correction.
Thank you very much!
regards
Thom

Dear Thom,
Please verify the note : 881553, this problem occur when the user not have SAP_CM_ADMINISTRATOR_COMP profile..
Best regards..
Claudenir Bispo

Script to Create User and Add profiles

Instead of using the ODI 10g GUI Console to create users and add them to a profile, Can this task be achieved by scripting ? Either by wlst or JMX or Java Packages ? Please advise and guide me.
-Thanks,

Is there any other way for adding Bulk users and assigning them to a profile? Any thoughts Please
Versions: 10.1.3.5 and 10.1.3.6

Migrating Users and Groups from Windows 2000 server to Windows 2013 Standard.

OK...let me see if I can get this question out the way I need to....
I inherited a Windows 2000 Server that's on it's last legs. We have a new server, a Windows 2013 Standard machine that we just recently purchased. I need to migrate the users and groups over to the new server, but there are two things that are
making it difficult:
The 2000 machine is NOT a Domain Controller
The 2000 machine is NOT running Active Directory
This is a file server that hangs onto another network of which I have no control of. It has its' own IP address and there is NO WAY we can run Active Directory or make it a domain controller.
I have close to 300 users, groups, and printers to bring over to the new server. Rather than kill myself doing manual input, is there any other way to do this?

Hi,
When you import the CSV file to new server, you need to create a new user account then import the CSV.
http://blogs.technet.com/b/heyscriptingguy/archive/2014/10/01/use-powershell-to-create-local-users.aspx
If you have any issue, i suggest you could ask in PowerShell forums:
https://social.technet.microsoft.com/Forums/en-US/home?forum=winserverpowershell
Regards.
Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Support, contact [email protected]

Migrate users and passwords from Mysql to APEX

Hi
I have a file containing user names and passwords. The file is an export from a MySQL database. The passwords are encrypted in MD5 format. I need to create these users in my APEX workspace. We have tried the following but I can not log in after we create the user. How do you do this correctly? We use apex 4.1 in an Oracle 11g database.
APEX_UTIL.CREATE_USER(
p_user_name =>'password2' ,
p_first_name =>'f_password2',
p_last_name =>'l_password2',
p_description =>'Self reg',
p_email_address =>'[email protected]',
p_web_password =>'B40DEE3534708A22F11EBE6C05D4C813',
p_web_password_format => 'HEX_ENCODED_DIGEST_V2' ,
p_account_locked =>'N' ,
p_change_password_on_first_use => 'N'
Regards
Lennart

When you run Firefox on your Mac, a Firefox profile folder is created with default data and settings. You have to remove the '''contents''' of the new Firefox profile folder on your Mac (e.g., the bookmarkbackups folder, places.sqlite , cookies.sqlite, etc.) and then copy over the '''contents''' of your old Firefox [[Profiles|profile folder]] to the Mac profile folder. You should do this selectively, just copying important files (like places.sqlite for bookmarks and browsing history). [[Recovering important data from an old profile]] lists important files and explains how to transfer the data to the new profile on your Mac. [[Backing up your information]] explains where the old profile data is stored and how to save a copy.
These articles may also help:
*http://kb.mozillazine.org/Profile_folder_-_Firefox
*http://kb.mozillazine.org/Moving_your_profile_folder

Migrating users from one domain to another(Interforest)

Scenario- Two Domains A & B in two different forests.
A - holds exchange server in DMZ and 2 domain controllers in A used by exchange also in DMZ
B holds all users and computers and 2 Domain controllers used for authentication .
Now I want to migrate all users and computers in B domain to A domain using ADMT
My question here is
1. Can I use the DCs used by exchange to authenticate if I migrate users and computers from B to A.
2. If not what is the work around here. I want to build an action plan on this.

After the migration users will be in Domain A. Authentication will happen locally in Domain A using Domain A DCs. Make sure you have correct DNS server (DNS from domain A) for these workstations.
Santhosh Sivarajan | Houston, TX | www.sivarajan.com
ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA
Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012
Blogs: Blogs
Twitter: Twitter
LinkedIn: LinkedIn
Facebook: Facebook
Microsoft Virtual Academy:
Microsoft Virtual Academy
This posting is provided AS IS with no warranties, and confers no rights.

ADMT migration

Hello All,
We are planning to do domain migration and management has decided to use ADMT to migrate users and computer objects
from a project management end , I am tasked for effort estimation for ADMT
we have 25000 clients and computers across 2 sites ( single forest with 2 child domains ) . we will eventually consolidate 2 child domains to 1- end goal will be single forest single domain ( different merger )
can some please help me ( rough estimates ) how long does it takes to migrate 25000 clients and computers using ADMT, keeping assumptions that there are moderate group memberships .
does it takes 1 week activity ( end-end ) ? or 2 weeks ( worst case scenario including contingency )?

There is no predefined best practice for your scenario. Migrating user accounts to another domain takes considerable less amount of time that migrating computer objects. I believe you can migrate all your user accounts in maximum of 2-3 hours. Do not forget
to migrate the associated groups along with users.
For migrating computer accounts, each computer account takes about one minute to accomplish the task. Not only the computer needs to be copied with most of the properties to the destination domain but also the source computers is deleted and at the final
step the DNS suffix of he client is changed to the destination domain. I have to say with 25000 computers it is going to take a long time. So I recommend you to split these 25000 computer accounts into 20 sub migration process. What I mean is it is better
to do it parallel on 20 servers. You can install ADMT on 20 servers and migrate 100 computer accounts simultaneously using 20 migration servers. In that case the process will go 20x faster. Weekends are good time for this. Do not forget that post migration
in computer migration using ADMT is very important. That is the time when the DNS suffix is changed. If you bypass this step you just have a bunch of computers in your destination domain which needs to be rejoined to be functional.
Please note that you should be prepared to roll back the unsuccessful clients to the old domains if some of them goes wrong by any reason. Start slowly and test with pack of 5 computers on each servers and then move to the rest of the computers. Consider
link delays and also after migrating the test accounts, verify if logon and third party accounting applications works properly. you may need to spend significant amount of time on SQL servers in order to make them operational again. So the best is to prepare
a list and write down the risks and have a plan for each of them. In that case you will have a smooth migration process.
Mahdi Tehrani |
|
www.mahditehrani.ir
Please click on Propose As Answer or to mark this post as
and helpful for other people.
This posting is provided AS-IS with no warranties, and confers no rights.
How to query members of 'Local Administrators' group in all computers?

How to recreate EBS user and keep all his historical data.

Hi all
We have a user that is having an issue seeing any of his scheduled Discoverer reports within the Schedule Manager window of Discoverer Plus; Discoverer Desktop works fine.
The solution for it's to recreate the EBS user. The problem with this is that, if we recreate the EBS user, he will lose all historical data connected to that user, including the results of the scheduled Discoverer reports as well as all of the EBS created/last updated information.
There is a way to recreate an EBS user and preserve the historical references.
Thanks

We have a user that is having an issue seeing any of his scheduled Discoverer reports within the Schedule Manager window of Discoverer Plus; Discoverer Desktop works fine.
The solution for it's to recreate the EBS user. The problem with this is that, if we recreate the EBS user, he will lose all historical data connected to that user, including the results of the scheduled Discoverer reports as well as all of the EBS created/last updated information.Why do you need to recreate the user?
Are you saying you are going to create a new username for the same user and end-date the old one?
There is a way to recreate an EBS user and preserve the historical references.I believe there is no such a way to find all records/tables with the old user_id. Even if you find the list and update them manually, I believe this approach is not supported.
Please log a SR to confirm the same with Oracle support.
Thanks,
Hussein

Using users and groups from LDAP in ADF application

Hi there,
I'm using WebLogic Server 10.3.5.0 and JDev 11.1.2.3.0.
I configured my WL server to use the users and groups defined in my LDAP server (they display when I select the Users or Groups tab). So this works fine (I think).
Now I want to use 1 group, let's call the group ApplicationGroup, and all it's users to give them access to my ADF Application.
But I can't find proper/up-to-date info about how to do this.
I tried 2 major things:
1) I configured ADF Security to use Authentication and Authorization. Defined an Enterprise Role with the same name as in my WL server (so ApplicationGroup) then defined a
Application Role with a custom name and added the Enterprise Role to it. That Application Role I gave access to all my TF's and Web Pages. When I deploy this, It just doesn't work (Migrate Users and Groups is not checked).
2) Used the Authentication option in the ADF Security and the rest is the same as in 1). This works +-, I can login with all users so the role mapping isn't configured right I guess?
Any help or documentation that could help me?

Since we aren't using EM I had to find an other way. And I found it.
In web.xml ADF Security (I suppose) automaticly adds 'valid-users'. In my weblogic.xml I added my enterprise role as a principal to 'valid-users' and this works for me.
Thanks for the help.

Assigning users to alert profiles in APO DP

I am using APO DP V5.
I am trying to understand the relationship between users and alert profiles.
There is (a) transaction /SAPAPO/SDPALPR to assign users to alert profiles and there is (b) the assignment of alert monitor settings as 'favourites' in the alert monitor.
How does one use (a) and (b) in a sensible way?
Thanks, Bob Austin

Hi Bob,
In transaction /SAPAPO/SDPALPR you can assign one alert profile per type (SDP used in DP and SNP) per planning area. So basically each user is assigned to one alert profile only. This will be the profile in Interactive Demand Planning where you can switch on the alert profile (comes at the bottom of screen below the keyfigures).
On the other hand you can access Alerts in the stand-alone Alert Monitor. There the user can have favorites which determine the functional area for which sees alerts (like DP SNP or Forecast or PPDS etc.).
So if your end-user is going to use Alert Monitor only through Interactive Demand / Supply Planning go for option A. But if he will use the Alert Monitor (Txn /SAPAPO/ AMON1) then go for option B.
Hope this helps.
Thanks,
Somnath

How to migrate users from HUB to Shared Services

Hi,
We are upgrading Essbase from 7.1.6 to 9.3.1. In 7.1.6 we were using Hyperion HUB for provisioning and we are going to use Shared Services with External authentication for the provsioning from now on.
My question is what is the best way of migrating users from Hyperion HUB to Shared Services.
Thanks,
MP

After you copy the SQL Repository across to the new environment and log in with the owner account, you will be required to register the application with Shared Services. After registering with SS it should prompt you to "Migrate Users and Groups" which will do the migration for you.

Migrated users from Dev to QA ,how to find where they are located in my system

Hi ,
I just migrated users and servers from DEV to QA . I just want to find the specific folder ,where the users and servers are located in my system .
Thanks,
Raghunath

I didn't get exactly what you are asking…
To find out specific folder ,If you want to find the user (Ragu) included in which group?
Select the user and user group from CMC Home list box or click on the users and groups
In the Search Title enter the user id (Ragu) -> then select the user (Ragu) and right Click and select member of form the context menu.
It will display list of user groups which user included.
So all the user’s information stored in connection servers (CMC Data Base),
whenever user run report..first it will hit the connection servers (CMC Data Base) and check whether user have authorizations to the respective DB/Servers...If user have authorizations then again hit the requested DB/Servers and fetch the data and show in the report.
where the users and servers are located in my system .
To see what are all the servers -> click on the servers
Then it will display folders like
Core Servers
Web Intelligence Server
Dashboard Server
Promotion Management Server Etc..
For example if you click Web Intelligence Server, able to see how many servers and what is the state and host name etc… all the servers related info also stored in CMC Data Base.
So all the users and servers information not located in your local system.

How to do a Clean Install (Don't preserve users and network settings)

I'd like to make a clean install of Snow Leopard -- but NOT erasing the whole drive and NOT migrating/preserving my users and network settings.
I have a bunch of applications and huge data sets (about 40G) on the boot drive that I don't want to go through the trouble of reinstalling or backing up, and that do not install Application Support folders and the like. I'd like to keep them, as well as migrate files like fonts and preferences over manually. Thus I don't want to format in disk utility and install.
I seem to remember there was the option in Tiger (Leopard maybe?) to Archive and Install Without Preserving anything, such as network settings, users, extensions and preferences. It would leave a completely fresh System, and a Previous System where I could manually migrate over everything I wanted to keep.
Is this possible in Snow Leopard?
Thanks.

Let me clarify.
Snow Leopard does an Archive and Install, BUT it PRESERVES Users and Settings. The default install "upgrades in place".
I have been having all sorts of weird crashes and hangs on my Leopard install and i want a fresh, not upgraded install.
I WANT to keep my old Leopard system so I can manually transfer over fonts, files, and applications.
I WANT an upgrade that DOES NOT preserve Preferences, Application Settings, extensions, etc. etc. etc.
But, I do NOT want to have to completely format and install, because that would involve burning approximately 60G of files and applications to DVD-Rs and copying them back.
Thanks.
Message was edited by: J Law

ADMT 3.2 Migrate users to the same organizational unit in the Target Domain as they are in the Source Domain?

Hi,
I am in the middle of a inter forest migration and have created the target domain (TargetDomain.local) 2008R2 and Source Domain (SourceDomain.Local) 2008R2 with a two way trust. I have installed ADMT 3.2 on a server in the Target Domain. I am able to migrate
users form the source domain to the target domain. I have copied the OU Structure from the source domain to the target domain. The issue I am currently facing is that I would like to find a way to migrate all users from the source domain to the target domain
and the users migrate to the same OU as the source. I have looked at the include file option but cannot find a way of specifying the source and target OU's.
Please could someone help me with this, Thanks.

Hi,
You need to create the same OU on target domain, then do the user account migration.
On Organizational Unit Selection page, select Browse and select target OU, then click OK.
For the more and detail information, please refer to this article:
http://social.technet.microsoft.com/wiki/contents/articles/16621.interforest-migration-with-admt-3-2-part-3.aspx#Group_Account_Migration
Regards.
Vivian Wang

User and Computer memberships are missing after moving computer and user objects using ADMT

Hi to everybody.
Source domain Windows 2003. Destination domain Windows 2008. I use ADMT 3.2
I have noticed 2 issues:
1. After migrating users, membership to all Bultin domain groups, is lost. Migration of custom groups is completed without any problems prior to start migrating users.
a. Example 1: user in source domain belongs to Domain Admins, Domain Users and a custom Domain group with the name Test. After moving the user, the membership is as follow: Domain Users and Test! And the worst of all
is that I believe that Domain users membership was not produced by the migration but from the AD mechanism that automatically gives every new user the Domain Users membership. Look at example 2.
b. Example 2:user in source domain belongs only to the Domain group with the name Test. After moving the user, the membership is as follow: Domain Users and Test!
2. After migrating a computer account from source domain to destination domain I have noticed in the "Local Users and Groups" that the Domain Admins membership in the Administrators group is missing.
Any ideas? I think I am missing something fundamental here.
Thank you all in advance.

additionally, from the migration log I see the following
WRN1:7372 ADMT does not process BUILTIN accounts or change the membership of BUILTIN groups (Administrators,
etc.).
there is 1 line of the above WRN for each builtin group that the user belongs in the source domain. This
means that there I have to do this membership update manually? And what if I have 1500 users and 300 groups?

ADMT migrate users and preserve profile

Similar Messages

Maybe you are looking for