Move roaming profile user from 2008 to 2012 on new domain; logon and permission issues

roaming-profilewindows-server-2008-r2windows-server-2012

I have an older server 2008 machine with domain old.local. I created a new server (2012 R2), promoted to dc and created the domain new.local.

I set up a share for user folders Users$. I moved a users' folder (call him jim) from old.local to new.local. On a machine that was joined to old.local and that had been used by this user, I joined new.local. I updated the profile folder path on new.local to reflect the Users$/jim location on the new server.

Now, when I log into the computer that I just joined to the new domain with the jim user, I am getting "Logged on with temporary profile" message. The only thing in event viewer that mentions anything about logging in states:

DCOM got error "1787" and was unable to logon OLD\jim in order to run the server: {UUID}

I can't figure out why the heck it is logging an error about trying to log into the old domain. I also can't figure out why the temporary profile issue is happening; the effective permissions on the folder show jim as the owner with full control. Wouldn't be surprised if this is just an artifact of not logging into the new domain correctly though.

Any ideas on what else I can check to track this problem down would be appreciated.

Best Answer

If it was me, I would have done things in a slightly different order to avoid this sort of thing. I suspect the roaming profile you copied to the new server is causing the problem. Profile issues moving to new domains is something I have experienced a lot.

If I were you, I would do the following to attempt to resolve the issue:

Log off as Jim

Log in as Local admin

Take a backup of the local and roaming profile

Right click Computer\Properties\Advanced System Settings\Advanced Tab\User Profiles - Highlight any reference to Jim in the list and hit delete

Go to the server, delete the server copy of Jim's roaming profile and remove the roaming profile setting from the user account object

Log off local admin and restart the machine

Log in as Jim (you will create a new profile)

Set the roaming profile setting for Jim, then log off and on a few times until you can see the profile appear on the server

Copy folders you need from the **old roaming profile backup** to the **new local** profile. Do not copy the whole thing as you'll move over things like the NTuser.dat file and other system files that will be either useless or cause you problems. Only copy stuff you need, like favourites and desktop for example.

Log off as Jim (new profile will be saved to the server is the location specified in AD)

Log on as Jim (the profile will be downloaded from the server and will hopefully now work)

This should fix it. Let me know how you get on.

Related Topic