Migrate local client users to OD users

Good afternoon.
In the last year I have been hired at a company with over 140 client machines and numerous intel xserves. The problem (and the nightmare) is that they have never set up the client machines and users as part of the OD.
For the obvious reasons of management, single sign on, and security I would like to implement an OD company-wide with replicas. The main hurdle right now is how do I migrate the local user accounts on each client to OD accounts and keep the local user home folders? I do not need to make these users portable users, just want them to authenticate against the OD.
Also how do I handle authentication for users with laptops when they are offsite?
Thanks!

Hi Brian,
What we did is create the user with the same name in OD. We set their home folders to /users so that the home folder would point to their local hard drive. We then removed the local user, but did not remove their home folder. The home folder gets renamed, so you need to rename it back, and assign permissions to the OD user. Login as the network user and it works.
For laptop users, we set them up as mobile users. They sync their network home folder (in /users) to their local home folder (also /users) therefore there is no real sync. They can then authenticate offline.
All the best,
Robert

Similar Messages

  • Migrating Local Users to Network/Mobile Home Directories

    Hey Everyone!
    A Happy Holiday's to you all! I'm in the midst of building a new system for my new clients. They had nothing but static IP numbers and no actual servers in a 50+ Mac environment. MacBook Pros, G5's and PowerBook G4s up the yang.
    What I'm looking to do is migrate as seamlessly as possible, all of the existing local users to network users and then some of those network users will become mobile accounts. I have Open Directory authenticating properly so...
    Here's my plan:
    1) Finish creating new builds for the MacBook Pro's, the G5s, and the PowerBook G4s.
    2) Create the users in OD and assign them to groups for permissions.
    3) Drag and drop entire home directory from each computer to a shared folder on my OD Server.
    From here I want to run chown, I'm guessing, to change the user:group for the home folders I copied over so that they match the ID's created by OD. I figure when I do that, then I can simply replace the OD created home folders in my server's Users folder with the copied and permission modified home directories from each local user.
    My guess is that would be the fastest way to migrate the users to the network.
    My question is are the terminal commands I need to run on each folder in order to make this as seamless as possible?
    chown -R username:newgroupname /~path to copied local home directory
    Is that syntax right?

    The command is correct!!!
    But my quess is if you use ACL's to set the permissions you won't need to run the command on every folder
    Best Regards

  • Lync 2013 client is deployed but user accounts are not migrated from OCS to Lync 2013 Server - how to open Lync meetings automatically in the Lync Web Plug-in

    We have in our enterprise the following scenario:
    1 - Lync 2013 client is installed
    2 - User accounts are not migrated to Lync 2013 Server, users are using Office Communicator as their main tool
    3 - Users receive Lync 2013 meeting requests but when try to access them, Lync 2013 client launches and shows error. Users will need to open the browser and paste the URL to the address bar but this still open
    4 - We cannot use the workaround of adding "?SL=1" to the Lync 2013 meeting URL as the user base is large and manual workaround is not accepted
    5 - Question: is there any automated way, via egistry key or GPO setting, so that users temporarily (until their accounts are migrated to Lync 2013 server) can bypass Lync 2013 client completely and automatically open all Lync 2013 meetings
    on the browser, using Lync Web Plug-in?

    Thanks for the response,
    First, I should have mentioned clearly that users have Office Communicator 2007 client and Lync 2013 client installed in their machines. Their accounts are not migrated yet to Lync 2013 server.
    Second, we are using IE9 and IE10. The issue is that users CAN join Lync 2013 meetings with their browsers but have to paste the URL manually to browser and add "?SL=1" otherwise, if they just click at the "Join Online Meeting" or "Join
    Lync Meeting" URL it launches Lync 2013 client which shows error because is not configured yet, as they are using OCS client and migrating slowly to Lync 2013 server.
    Is there a Group Policy setting or a registry key from Microsoft that can be turned on to these users machines and make will all Lync meeting requests to be opened in IE browser instead of Lync 2013 client. We need a way to ignore
    Lync 2013 client until user accounts are migrated to Lync 2013 Server. Manually typing URLs is not an option in a big organization, can't explain thousands of users of different levels what to do.
    We are regretting the decision not to separate Lync 2013 from Office 2013 package we deployed recently. If Lync 2013 is uninstalled then all Lync meeting requests are opened in browser without an issue.

  • Migrating local users failed with migration tool

    Getting an error trying to migrate local users from windows server 2003 R2 (X86) to windows 2008 R2. There is no domain involve in our environment. Both are workgroup servers.
    By following the steps given by Microsoft, trying to export local users and group information but failed with the error massage below,
    Export-SmigServerSetting : Initialization of the migration failed.
    The migration operation encountered an unknown exception.
    At line:1 char:25
    + Export-SmigServerSetting <<<<  -User All -Group -Path C:\migrate\miguser -Ver
    bose
        + CategoryInfo          : InvalidOperation: (:) [Export-SmigServerSetting]
       , MigrationException
        + FullyQualifiedErrorId : Microsoft.Windows.ServerManager.Migration.Comman
       ds.ExportSvrMigSettingCommand
    Trying to find this error massage through web page but none encounter this before.
    Not sure if there is something that I missed out or it would be something to do with the source machine.
    thanks,

    Hi,
    Did you follow this MS article?
    http://technet.microsoft.com/en-us/library/dd379531(v=ws.10).aspx#BKMK_strategy
    Meanwhile, hops this helps:
    Troubleshooting Cmdlet-based Migration
    http://technet.microsoft.com/en-us/library/dd871120.aspx
    Regards.
    Vivian Wang

  • Is it possible to migrate local profiles to user profile disks?

    Hi guys, 
    Is there an easy way to migrate local user profiles on an remote desktop server to user profile disks? I am replacing a Server 2008 R2 and want to start using UPD's instead on a Server 2012 R2. 
    Best regards,
    Hasan

    Hi Hasan,
    Thanks for your posting in Windows Server Forum.
    As per my research, you can able to achieve your data by choosing the option “Store all user settings and data in the user profile disk” would obviously capture everything normally stored under C:\users\<username>
    and add that to the UPD. But please notice however that you can only select the roaming part of your user profile data.
    On UPD profile is stored in a .VHDX file specific to your account which is placed on a central share. Upon logon a mount path is created under
    C:\Users\<username> that points to that .VHDX file on the share. This makes the solution fully transparent to the Operating System and applications. If you’ve used UPD before you will have noticed that the filenames of the .VHDX files hold the
    users SID, not the account name.
    For more information, please refer below articles. (You can refer below article for Server 2012 R2)
    1.  Using User Profile Disks (UPD) in combination with predefining the Modern UI Start Screen on RDS 2012 (appsfolder.itemdata-ms)
    2.  Working with User Profile Disks on Session-Based Desktop Deployments
    Hope it helps!
    Thanks,
    Dharmesh

  • Anyone has experience combining local users with managed user?

    I thought this would be pretty common. We started with each user being a local admin user (12 mac systems in the office). We now got a snow leopard server and wanted to migrate everyone to a Open Directory user. We did hours and hours of research and found a few supported way to do this but having some problems....One way was to send out an invitation email from Server Preferences. When the user receives the email he can automatically convert current user into a managed user. However, the feature is suppose to synchronize password between these two users but it didn't for us, so now the user is left with a different password for the local account and OD account. What is going on? Any tips?
    This is taken from a book that I am reading:
    From a Mac OS X Server email invitation—If your network directory service is being hosted from a local Mac OS X Server that is being managed via Server Preferences, then you can bind it automatically from an email invitation sent by the server’s administrator. Clicking the “Automatically Configure My Mac” button in this email will open the Accounts preferences and bind your Mac to the Mac OS X Server and tie your local account to the server account. Again, this process will synchronize the account passwords and can automatically configure client services. Further, the invi- tation email can have clickable links to other services hosted from the server like file and web services.

    I too was thinking about this, but punted after realizing it was too messy. My current solution is to make a local user called 'localadmin' and make this same user on every machine, give it admin privileges, etc. That way, if someone wants to install some software, they can fast-user-switch to localadmin, do the install, and then reset to their actual login. Once the logins are tied to an OD server and you become a 'managed' user, the individual can change their password locally and it will indeed update the OD master.

  • "%userprofile%\appdata\local" is counted in the users profile

    Hello,
    In our environment we see some strange behavior on laptops. Users report that their user profile is becoming too large. We use the user Profile Management tool from Microsoft.(Limit profiles size - proquota.exe @ 100mb)
    So “%userprofile%\appdata\local” is counted in the users profile.
    After that userprofiles are inconsistant. Users log's on with a TEMP profile or cannot logon anymore.
    This seems just a symptom of a underlying problem. We can solve it by giving the user a new userprofile. But we have seen this problem too frequently now.
    How is it possible that de default variables %LOCALAPPDATA% en %APPDATA% suddenly are missing. The day before the user has no problem. It mostly happens on laptops after a VPN or WIFI connection. It looks like if the connection is lost before the local user
    profile is synchronised to the server profile.
    We also see Event 1530 frequently. Can this be a clue?
    Windows detected your registry file is still in use by other applications or services. The file will be unloaded now. The applications or services that hold your registry file may not function properly afterwards.
    ## user registry handles leaked from \Registry\User\S-1###
    Is the missing of these variables the cause or effect of a corrupt user profile?
    Should we think of leaving roaming profiles for laptops? And look to UE-V or another solution? 
    Giving the user a new user profile is a workarround but not a solution.
    We are using:
     We use Windows 7 x86, latest patches, Office 2010.
     A Windows 2003 domain functional level
     We have an OU in AD wich contains the users and computer in subfolders.
     We use Loopback processing for Group policy so the user policy is linked to the client OU and not to the user OU.
     We user folder redirection to the homeshare (DFS namespace)
     User profiles are on a DFSnamespace but single server.
     We user Offline files for the Homeschare.
    Regards,
    Peter

    Hi Laarse,
    Thanks for the reply.
    Please try enable “Do not forcefully unload the users registry at user logoff”
    policy to check if it works. The Category path is
    Computer Configuration\Administrative Templates\System\user Profiles\
    After that, if the issue still exist, please collect below information for further research.
    Information Collection
    ===============
    1. Enable gpsvc debug logging by below steps:
    In the Regedit Editor, expand HKLM\Software\Microsoft\Window NT\CurrentVersion
    Create a new key called “Diagnostics”
    Under the key, create a DWORD value “GPSvcDebugLevel” and set the value as
    0x30002.
    After making this change, restart the computer.
    When the issue happens again, please send me the gpsvc.txt under %systemroot%\debug\UserMode folder.
    Please let me know the time you experience this issue.
    2. Please help run
    gpresult /h c:\gpresult.html command on a problematic client, and send me the
    gpresult.html file.
    3. Please help collect profile trace on a problematic client by below steps:
    Logon to a client with local administrator account.
    Open a command prompt with ELEVATED.
    Run "logman -start profile -p {eb7428f5-ab1f-4322-a4cc-1f1a9b2c5e98} 255 3 -ets" (without the quotes, if we face error, please do not use copy, manually input this
    command)
    Switch user (do not log off the administrator account) and try to logon with the problematic user to reproduce the symptom.
    After you login, please logoff the domain user and back to local administrator account.
    Run command
    "logman -stop profile -ets" with administrator privilege.
    Then send me the profile.etl under
    %SystemRoot%\Debug\UserMode folder 
    Thanks.

  • Changing local user to network user on the sever?

    I moved a local user's home folder off a client computer to the server and made them a network user. The user can log in to the network numerous computers fine, as expected. However, the original computer where the user was a local user will not allow him to log in. It seems the original computer still thinks he is a local user and not attempting to log in to the server. Other network users can log in using the same original computer in question, only this user can not. Is there some way to check and remove the the local user? Local client computer is Leopard, server is Snow Leopard. There use to be an app called Netinfo Manager which I thought would allow something like this, but seems to have been removed with Leopard. I know I can give the user a new name and that would get around the problem, but it does not solve the problem. Any ideas, anyone? Thanks.

    I recreated the user, then used dscl to delete the user. But, alas, did not solve the problem. Dug a little deeper into some other commands and found "id" which indicates that said user is part of many groups
    :~ id username
    uid=1025(username) gid=20(staff)
    groups=20(staff),215(com.apple.loginwindow.netaccounts),1025(us),102(com.apple. sharepoint.group.2)
    it seems that uid 1025 is the network user id, as well 1025(us) is a group on the server; don't know where 102 come from.
    It seems the client still is not looking on the server, because it immediately shakes off login.
    Any more thoughts?
    Thanks.

  • Netboot, diskless clients, and Open Directory users?

    Hi, I've been reading through the System Image pdf & maybe it's me but a couple of things aren't clear.
    I want to set up diskless clients and allow users to log on to their network home folder using their OD login. Is this possible and where would be a good place to start with instructions on setup?
    thanks, Patrick

    Ok, I got it.
    But what if I want the OD user to have some configuration data on the local client?
    Let me explain that a bit better. The configuration I would like for my network and users is as follows: the server works only as an authentication server, I do not want roaming profiles or homes directory on the server; I just want the server to authenticate users when they log in to several client machines amongst the lan.
    For documents sharing, in fact, I much rather prefer using Dropbox, which allows my users to share on a WAN-instead-of-LAN basis.
    But a home local directory is needed for OD users to keep libraries, preferences files and so on.
    Back to the old Windows server (PDC) time, I used the server as a name server authentication only, still the client created a local profile for the user of the server.
    Does OD works this way too or am I missing something?
    Thank you.

  • Some clients see all other users some dont?

    Hello Apple Forums!
    I have a question regarding my ichat service running on a 10.6.2 machine (x-serve)
    I had 1 user today that I set up on our ichat, and when I added her, logged in to the server, however no buddy list. My experience with all other users is when they are added, they immediately see all the other users who are logged in. Im not sure how to resolve this. I know have to add buddies to all the internal employees in order for them to see her. Can someone please tell me what I am doing wrong?
    Please let me know what other information you need.
    Thanks,

    Thanks for the correction on the forum posting. Should I re-post or is there an admin that can kindly move over for me?
    tibor.moldovan:
    I have researched this issue for a while now. I have cleared all the local preferences on the end users machine. I have not set up a test user, however I will. All other clients I have added recently, the entire "workgroup" (everyone part of the same workgroup) show up. Come to think of it, this particular user is in more than one workgroup. Hmmm. Maybe this is related to what is going on? If the "workgroup" group is not primary, then she wouldn't necessarily see everyone else?
    Tim:
    Adding (or sending buddy requests) to the other users in the ichat server (this is a local ichat for interoffice comm only) when accepted, those "added" buddies show up fine and can communicate.
    Message was edited by: cpguru21
    Message was edited by: cpguru21

  • Can individual Adobe Air apps be installed without local admin permission into a user-owned folder?

    Is this a supported scenario?
    Windows 7 PC.
    Adobe Air runtime (latest; 4.0) has been installed by an administrator using a local admin account and the eulaAccepted file is present under the "All Users" profile.
    User logs in using her own account which does not have local admin rights.
    User downloads an Air app and tries to install it to C:\Users\<username> where she has full write permissions to the disk.
    What I observe when acting as the User is that the Windows UAC (security escalation to local admin rights) dialog pops up. Can anyone clearly state what the Adobe Air installer is doing that requires the UAC escalation when installing an app to a user's folder? Thanks.

    Thanks for your reply, Chris. We're working around these problems by deploying the Air runtime + the application separately using an administration tool, which is fine for now.
    I logged the question because I don't see any registry edits or privileged folder access taking place. I suspect that the UAC escalation has something to do with the "eulaAccepted" file; checking that it exists. I doubt that escalated permissions are really required for this. In the long term, it'd be good if this "use case" could be added to the test cycle of Air; perhaps the UAC dialog could be avoided, improving the flexibility of deployment options.
    Ideally the test would start with an adminstrator-installed Air package *without* the EULA being accepted. The user should be able to install apps and approve the EULA without the UAC dialog popping up at all.

  • Migration Assistant - Files Transferred, but no User Account

    I used Migration Assistant to migrate a User account from an early 2009 Macbook Pro to a brand new Macbook Pro. The files transferred (they appear in Macintosh HD / Users), but there is no User account showing in System Preferences or at Login. The permissions are blocking me from accessing the files. I can change them one by one, but, naturally, I'd rather not. I'd love it if there were just some way for me to force the OS to recognize the User so that I can delete the Temp user and work from my original User (I tried to Migrate from the initial setup screen, but it wouldn't find my backup volume).
    Some background--beginning a few months ago, I was having some technical problems, and on the advice of an apple-certified tech had attempted to create a new user account. It appeared to fix the problem, so I began manually migrating files, but slowly, so that if it was a software issue, I would be able to isolate the problem software. A month in and after only half of the files were transferred, the tech problem reappeared, so I wound up with half of my files in one user account, half in another. I went ahead and migrated the other half of the files, but wound up with serious permissions issues all over the drive (mainly in photos, music). That is the backup that I am migrating from onto my new replacement Macbook Pro. I don't know if it's the permissions problems that are mucking up the migrate, or what. I have several older backups (from a prior, prior Mac) with no permissions problems, but that's a last resort, as I'd rather avoid the headache of figuring out what files I've updated since those year-old or more backups.
    Also, I've been running MA from a Time Capsule using an Ethernet connection. I bought a USB to USB cable, but the comp won't find the TC unless it's connected via network. Any better, faster connections? I use the machine for work, and I'd rather spend as little time migrating as possible.
    Thanks in advance, folks.

    Sorry for the confusion. My first Mac was a PowerBook--we'll call it "PowerBook." Then I had a 2007 MBP--we'll call it First MBP. PowerBook was migrated to First MBP with no problems except some unreliable Airport at times. I did an Erase & Install and transferred data folder-by-folder from PowerBook to First MBP, as I had read somewhere that Airport settings migrated from PowerBook might cause troubles when put on an Intel machine. (Some minor problems persisted, but those are most likely irrelevant here). Then, I bought a new MBP at the beginning of 2009 when Apple came out with the new design. We'll call that Defective MBP. I just received a replacement MBP, call it "Replacement MBP."
    I bought Defective MBP and migrated First MBP to it using Migration Assistant. Defective MBP began having technical problems--it froze up, it said I had no Airport card installed, yet it passed all hardware tests. So I took it to Apple, who replaced the Airport card.
    I then began seeing a third-party certified repair person to avoid making appointments. She was the one who advised me to create a new user account, because her tests were suggesting a software issue. I wasn't given detailed instructions on how to treat the temp user account. So, yes, I moved all files from "clwaltrip" (the original user account) to the corresponding folder in "catherine," what should have been the diagnostic temp account. By "corresponding folder," I mean that I moved the contents of Users/clwaltrip/Music to Users/catherine/Music, and so on--like a manual rebuild. I manually reset permissions on each of these folders to allow "catherine" Read & Write access, instructed Finder to Apply to Enclosed Items, and was still getting blocked by permissions all over the place. I eventually made sure that clwaltrip was empty of any important files and deleted the clwaltrip user account. I (very unwisely) attempted to set the permissions on Macintosh HD for "catherine" to "Read & Write". That, of course, required me to go back and repair permissions for days. (Yes, I am duly sheepish). (BTW, Defective MBP was sent in for service twice more during this period, the Airport card was replaced again, a cable was remounted, or whatever they did--nothing worked.) It was only a couple of days after the Macintosh HD permissions repair fiasco that I requested and was approved for a replacement (further issues were indicating a logic board fail, perhaps--drag and drop stopped working, etc). I backed up the single user account, catherine, from the Defective MBP onto the TC via Ethernet (likely with some remaining permissions issues not allowing "catherine" to access "clwaltrip"'s files even though clwaltrip no longer existed).
    I received the Replacement MBP and attempted to connect to the TC during initial setup using Ethernet. No connection could be made--it would not even time out after a few hours of reading the time machine backup. I forced restart and tried again. It still would not connect to the TC backup on initial setup. So I forced restart (held down power) skipped that step in setup, allowed it to create a user account (named "clwaltrip" again), and ran Migration Assistant from the Utilities folder (That was when I plugged in the USB, but after no response, I unhooked it and moved exclusively to Ethernet connection to run Migration Assistant--Airport was off). From the TC backups, I selected the backup volume "catherine" mentioned above. No new user account was created, but the user FOLDER for "catherine" is there, complete with all files (see below for details). I have made the "iTunes Library" in Users/catherine/Music the iTunes Library for "clwaltrip" and had to change some permissions to do so. (It's interesting that under "Sharing and Permissions" for these folders, the users listed are "staff," "everyone" and "(unknown)"--presumably "catherine" should be in there somewhere, but it is not and does not come up on the list when I select "+" to add permission for a new user.) I have added "clwaltrip" and given it Read & Write access to Users/catherine/Music, Users/catherine/Documents and Users/catherine/Pictures and applied all to enclosed items. I have not yet checked to see how well those permissions changes worked, nor have I physically moved any files from Users/catherine to Users/clwaltrip.
    I hope that all makes sense so far. I have backups of Defective MBP and First MBP, both before and after the Erase & Install mentioned in the first paragraph. (I actually have oodles of old backups and computers with most of my original files on them, if I need to start from scratch somehow).
    So. Replacement MBP now shows ONE user account in System Preferences--clwaltrip, the one set up by the initial setup screens when I took the computer out of the box and could not get setup to access the Time Capsule, as explained above. But Finder shows TWO User folders--Users/clwaltrip (from initial setup) and Users/catherine (migrated from the TC backup of Defective MBP). I used the option to transfer accounts, settings--I checked all boxes, in other words, and I only selected the "catherine" account to transfer from the TC backup (because there was only one account on Defective MBP when I last backed it up, as explained above).
    Yes, the Macintosh HD/Users/Catherine folder appears to be "orphaned" in that it does not show up in SysPref, but otherwise appears to have normal enclosed folders--Desktop, Documents, Downloads, Library, Movies, Music, Pictures, Public & Sites. And from what I can tell, it contains exactly what the "catherine" Home folder looked like on Defective MBP--same Desktop shortcuts, same enclosed items in catherine/Music, everything.
    About the red "no access" badge--back when I had two user accounts on the Defective MBP, I used to see the no access badge when trying to access "clwaltrip" folders from the diagnostic account, "catherine". But I altered privileges while logged in as clwaltrip to allow catherine Read & Write access, in order to transfer the clwaltrip files to catherine. The red badge went away and it does NOT show up on the items in the Users/catherine folder when viewed from clwaltrip on the Replacement MBP.
    You know, I think I knew that about the TC USB port at one point and just forgot. I'll put a Post-It on the TC to make sure I remember from now on.
    Thanks for your patience!

  • XID - Replace Local User to Domain\User

    Hi All.
    We have to change local SAPServiceXID User to Domain\SAPServiceXID User
    boths users are administrators into the Administrator Group.
    If we start the three central instances(Database,Abap,JAVA) with local User there is no problem.
    when we replace the local user to Domain\user and tries access to http://Host:50000/rep -->The page cannot be displayed, but in SAP Manage Console, the service green and from TCODE SMICM Java stack is green too.
    any idea?
    Thanks & Regards
    RP.

    Hi Rodrigo,
    I think you will have more success if you post in the right Forum
    Expert Forums  » Database & OS Platforms  » 
    Regards,
    Sandro

  • GW8 HP1 Windows client - problems with restricted users

    I've reproduced these on a few clean WinXP and Windows 2003 systems in both a GW 7.0.3 upgrade scenario and fresh install of GW 8 HP1 scenario. I am curious if anyone else has been able to reproduce these:
    - Client ignores DefaultIPAddress and DefaultIPPort values for non-administrative users. If these are defined under HKEY_CURRENT_MACHINE\Software\Novell\GroupWise by the installer's setup.cfg, they are ignored when the user who is logged in is a non-administrative user. Administrative user profiles correctly pull these values but non-administrative users always try ngwnameserver. If the user profile is upgraded to an admin profile, then they start reading DefaultIPAddress and DefaultIPPort. This does not seem to be a permissions problem on the reg. keys themselves, as the values can be read by regedit when logged in as the user.
    - Client does not setup MAPI profiles for the Address Book for a non-administrative user. Windows Messaging configuration dialog opens if you try to use the Address Book. If the user account is upgraded to an admin, then the next GW startup will configure the profile correctly. Downgrading the user to a non-admin at that point allows the Address Book to continue to function.
    This also does not seem to be a permission problem writing to the MAPI profiles registry keys under HKCU\Software\Microsoft\Windows NT\Current Version\Windows Messaging Subsystem. I can manually import the correct keys when logged in as the restricted user and then the Address Book works without issue.
    It does not look like in both cases the GW client even attempts to access the registry keys in question as per RegMon.
    GW 7.0.3 client on the same equipment does not have a problem.
    Any thoughts? Any other issues people have seen running GW 8 as a non-administrative user?

    Originally Posted by elarsson
    I've reproduced these on a few clean WinXP and Windows 2003 systems in both a GW 7.0.3 upgrade scenario and fresh install of GW 8 HP1 scenario. I am curious if anyone else has been able to reproduce these:
    - Client ignores DefaultIPAddress and DefaultIPPort values for non-administrative users. If these are defined under HKEY_CURRENT_MACHINE\Software\Novell\GroupWise by the installer's setup.cfg, they are ignored when the user who is logged in is a non-administrative user. Administrative user profiles correctly pull these values but non-administrative users always try ngwnameserver. If the user profile is upgraded to an admin profile, then they start reading DefaultIPAddress and DefaultIPPort. This does not seem to be a permissions problem on the reg. keys themselves, as the values can be read by regedit when logged in as the user.
    - Client does not setup MAPI profiles for the Address Book for a non-administrative user. Windows Messaging configuration dialog opens if you try to use the Address Book. If the user account is upgraded to an admin, then the next GW startup will configure the profile correctly. Downgrading the user to a non-admin at that point allows the Address Book to continue to function.
    This also does not seem to be a permission problem writing to the MAPI profiles registry keys under HKCU\Software\Microsoft\Windows NT\Current Version\Windows Messaging Subsystem. I can manually import the correct keys when logged in as the restricted user and then the Address Book works without issue.
    It does not look like in both cases the GW client even attempts to access the registry keys in question as per RegMon.
    GW 7.0.3 client on the same equipment does not have a problem.
    Any thoughts? Any other issues people have seen running GW 8 as a non-administrative user?
    I've reproduced this now with the FCS GW 8 client as well.
    Also a point of clarification on the MAPI profiles -- in an upgrade scenario from GW 7 client, if the user profile previosuly existed on the machine and had the MAPI settings configured by the GW 7 client, then they will work fine with GW 8. The issue seems to only occur with new user profiles, logging into a machine as a non-administrative user. The GW 8 client does not create the proper registry keys for the MAPI profile under HKEY_CURRENT_USER and the Address Book does not function.

  • Migration tool moves files to new user

    Hi
    I have a new imac and the migration tools works fine. i have migrated "my music" and now i am trying to migrate "my photos" but the tool wants to create a new user and my photos end up being associated with this new user rather than my account, i.e. i can't seem to move them between users. any thoughts on how i migrate the photos across to my user account or how i move them from a new user to my account?
    Cheers

    You move them manually, either from the old computer or by dragging the other account's home folder to the desktop and authenticating yourself.
    (72573)

Maybe you are looking for

  • Mouse tirgger in oracle 10g

    Hi, Is there any solution to use When mouse move when mouse enter when mouse leave triggers in Oracle 10g. Regards,

  • GLPCA- TSL - 1KEJ - Missing transaction currency values

    Hello all, i hope you can help me out.  We still have a part of our company on 3.1H and we have a little problem.  We have a report that looks at the GLPCA table and needs to get the Transactional currency amount TSL.  However it looks like all the t

  • Component configurator issue - Account assignment tab for SC in SRM 7.0

    Hello Experts,   We have to disable some fields from account assignment tab of SC. We have identified the webdynpro application as /SAPSRM/WDC_UI_DO_ACC. We started the component configurator /SAPSRM/WDCC_ACC_DEF_SC and under the view V_DO_ACCOUNTING

  • Error 1606 Reader XI Windows 8.1

    I am getting error 1606 updating Reader X1 "Could not access network location D:Documents\

  • Trouble importing pics from Canon Powershot

    I am not able to import pics from a Canon Powershot S400 even though I was able to do this before on my iBook G4. I have iPhoto version 5.0.4 and Mac OSX 10.4.10. The iBookG4 is recognizing the Canon, the number of pics to be imported but does not pr