Migrating local user profiles with ADMT

I am performing a migration from one Windows 2003 Forest containing one
domain to another Windows 2003 Forest containing one domain. (This is due to
business restructuring). I am testing the migration using VMWare ESX server
with both Forests on the same virtual switch. All the DCs are running Server
2003 R2 SP2. The Domains and Forests are both running in Windows Server 2003
operating mode.

I am using ADMT 3 and the first few parts of the migration were successful,
but I have had problems migrating the local user profiles. The current domain
does not use roaming profiles, they are all local to the machine.

Steps performed so far:
1) Installed the DCs, File and Print server, Exchange and SQL server to
mimic the existing domain.
2) Installed the DCs for the new domain (I want to test the basic migration
before I look at Exchange etc).
3) Configured the OU structure, group policies, login scripts etc in both
domains to mimic the old one.
4) Created a two-way trust between the domains and turned off SID filtering
in both directions with netdom.
5) I have successfully migrated several groups.
6) I have successfully migrated several user accounts, including their
passwords.
7) I have successfully migrated several workstation machines.

However, I am having problems with the user profiles.

The scenario is that I have a workstation that is a member of olddomain. I
have logged into that computer as user1 who is a member of olddomain. When I
look at the permissions on that profile in c:\documents and settings,
user1@olddomain.com has permissions.

I then restart the machine so the user profile is not in use.
I migrate the user account to newdomain.
I migrate the computer account to newdomain. On the ‘translate objects’
screen I chose to translate all options including user profiles.
After the machine restarts, I log in as the local administrator (not the
domain user) and check the permissions on the user profile in c:\documents
and settings. It has changed from user1@olddomain.com to user1@newdomain.com

Up until here, everything looks okay. Unfortunately, when I log into the PC
as the domain user, and select the domain as newdomain, I receive a new user
profile. i.e. I do not receive the settings from the old user profile, I
receive a brand new profile. When I look in c:\documents and settings, I see
2 relevant profiles - user1 and user1.newdomain (there is no user1.olddomain
folder - before the migration, I would log in and receive the profile just
called user1).

I tried the process for a different workstation and user, thinking that I
did something wrong. I migrated this second workstation this time choosing
none of the options on the ‘translate objects’ screen. I did not log in as
the second domain user, but tried security translation wizard before
attempting login again.

In ADMT, I ran the Security Translation Wizard for the second workstation. I
chose to translate all options, including the user profile. Unfortunately
when I logged in as user2 into newdomain, I again received a new profile.
Again when I look in c:\documents and settings I see 2 relevant entries -
user2 and user2.newdomain. The permissions on both are set to
user2@newdomain.com (the permissions do not mention user2@olddomain.com).

Thank you for any help you can offer.

I built the similar environment and followed your steps to test the result.

My environment is:

Source domain: windows server 2000

Target domain: windows server 2003

Client: windows XP SP2

I have successfully migrated user profile by security translation wizard.
Here is little difference. I translate user profile before migrating
workstation. Please migrate user profile before migrating workstation to
test the result.

If this problem still exist, please provide me the information below:

1) After you migrate users with SID history to the new domain and logon to
the new domain using this new user, please test if you can access the file
resources in old domain?

2)Please send me the log file under "Program files\ADMT\logs\Agent%" via
v-morche@microsoft.com.

The problem no longer persists. I created a new
virtual environment and followed my documented steps again and this time the
user profiles migrated successfully.

Sorry for any inconvenience - I was going to post in a few minutes, but you
had already replied.

Thanks for letting us know you have solved this issue. For any other
question, if I could help, please feel free to post here.

I am doing a similar project right now and I am having the same problem with the user profiles. It would really be nice if you could share a copy of your documented steps. I hope it's okay. thanks...

[Mickelodeon]

I have a kind of problem with this, I have migrated my first profile and I done it fine.
The I started to migrate other users from the old domain to the new domain and it started to fail, I know that I did the same procedure since the first time, anyone have idea about this.

Thank you very much.

[shrao]

I am also facing same kind of problem, i have migrated user profiles to new domain. After migrating when i use to loging user1@newdomain.com it create a new profile in the above mail. It's really nice if you could share a copy of your documented steps.

Thanks

Hi there - you've replied to a thread no longer on the news server.
Please use an NNTP client to access msnews.microsoft.com instead of
Techarena or any of the various web forums that copy threads from
these servers. Also remember to post new questions as new messages,
providing all relevant detail (such as version numbers etc) so we can
help you - best not to do "me too" posts.

Is that what they area called, "me too" posts? :-)

[StuBu]

We had this exact same issue and were wondering what was causing this issue. It ended up that we had to migrate the computer accounts with the ADMT server that had the original SQL database during the migration of the group and user accounts. We had the ADMT tool installed at our local site and lacked the database. We will be looking into copying or moving the database when we do the migration at our site.