Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows Server 2003Windows 2000Windows NTSmall Business ServerVirtual ServerExchange ServerIISHost Integration ServerISA ServerSMSWSUSMOMWindows Media ServerSecurityCertification
Related Topics
SQL ServerMS WindowsMS OfficePC HardwareMore Topics ...

Windows Server Forum / Windows 2000 / Registry / March 2006

Tip: Looking for answers? Try searching our database.

HELP - ProfileList, ProfilePath and SID value

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Xhork - 31 Mar 2006 00:13 GMT
Hello,

My situation is the following. Is technically complex.

I have 400 Windows 2000 PCs in workgroup, splitted between 30 sites. They
are all goiing to join a W2K AD Domain. I developped a Kixforms interface to
remotely join PCs to domain (netdom) and update DNS/WINS/NetBIOS IP settings.
It works fine.

My second concern is that existing local users accounts will move to domain
acccounts. And it won't be possible to map name (MYPC\Account won't be turned
into MYDomain\Account). Profiles won't be roaming so the new user will need
to get the former account settings.

For that purpose I wrote an interface that does the following :
- This tool has to be launched when logged as a local administrator
- Browse recursively the key HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList to collect all SIDs.
- SIDs are converted into names
- I populate 2 list boxes : one with the local accounts and another with
target domain accounts.
- I select the profile I want to copy and the target account
- I create the "future" profile folder for domain account
- I grant domain user Full Control on the entire directory
- I create HKLM\Software\Microsoft\Windows
NT\CurrentVersion\ProfileList\<Domain Account SID>
- I create the value ProfileImagePath and affect the local profile path.

Till there everything's fine. But I made count that the key
HKLM\Software\Microsoft\Windows NT\CurrentVersion\ProfileList\<Domain Account
SID>\sid has to be populated.
Could anyone explain me how is filled this value : conversion of the SID to
binary data, reading of the NTFS owner of the profile folder ?

I have almost reached my target and that's this last point that troubles me.
By the way I just want to log once on a pc and select the profile to
"create" and fill with other local profile data.

Anyway, would this be a good way to proceed ?
- Give the domain account full acces to former profile local dir ? (cacls,
ProfilePath\<SID>\ProfileImagePath and change the value ?

I know that it is an odd situation but I couldn't find any powerfull tool
that does what I want. So I decided to write one. But I lack quite a few data
to finish the job.

Thanks a lot in advance.

David Chatel
France
Jerold Schulman - 31 Mar 2006 10:05 GMT
If you use REG.EXE, built into Windows XP, Windows Server 2003, and later operating systems, or installed from the
Windows 2000 Support Tools, instead of regedit, you won't have that problem.

See tip 5346 » How do I retrieve a user's ProfileImagePath in batch?
in the 'Tips & Tricks' at http://www.jsifaq.com

>Hello,
>
[quoted text clipped - 46 lines]
>David Chatel
>France

Jerold Schulman
Windows Server MVP
JSI, Inc.
http://www.jsiinc.com
http://www.jsifaq.com
 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2009 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.