New profile after binding to domain
- Thread starter jparsley
- Start date
Hi. My company is now requiring to bind all the computers to an AD Domain. I did all what needs to be done with the Directory Utility (checking the 'Create mobile account on login') and everything else.
The problem is that the local user loses its permissions on the profile folder so ALL the data needs to be copied manually (losing it's preferences). Also when he/she tries to copy or modify the previously created folder, must validate as an administrator (annoying when there are lots of folders).
The most secure way to keep all the files and folders was making an image of the whole disk, reinstall and once bound to the domain after the clean install, copy all the info back using ARD 'Copy' utility which allows to define the permissions.
It's a pain in the *ss but it sure works for me.
If anyone knows a faster and secure method I will surely most appreciate it!
BTW: I'm using 10.5.8 and 10.6.2.
Regards.
G.
The problem is that the local user loses its permissions on the profile folder so ALL the data needs to be copied manually (losing it's preferences). Also when he/she tries to copy or modify the previously created folder, must validate as an administrator (annoying when there are lots of folders).
The most secure way to keep all the files and folders was making an image of the whole disk, reinstall and once bound to the domain after the clean install, copy all the info back using ARD 'Copy' utility which allows to define the permissions.
It's a pain in the *ss but it sure works for me.
If anyone knows a faster and secure method I will surely most appreciate it!
BTW: I'm using 10.5.8 and 10.6.2.
Regards.
G.
I have a solution that may work for you. I didn't like it so I moved away from it- at least for now.
http://www.likewise.com/
They have an open source client that you can join it to the domain and then migrate local user profiles to the new domain user. The profile migration worked perfect. The enterprise edition does much more..
I was going to use that solution at first but I was having problems with authentication. It was taking about a minute and a half to log in. I looked around on their forums and tried a few things, but nothing came through for me.
This program puts the domain profiles in /users/local/DOMAIN_NAME/USER_NAME.
I tried just copying that profile to where it would be if OS X would have created it, but it didn't work.
If I knew more about programming, I would just look at the source code of LikeWise and make my own little profile utility. I know the profiles can be transferred, but I sure don't know how.
Thanks!
http://www.likewise.com/
They have an open source client that you can join it to the domain and then migrate local user profiles to the new domain user. The profile migration worked perfect. The enterprise edition does much more..
I was going to use that solution at first but I was having problems with authentication. It was taking about a minute and a half to log in. I looked around on their forums and tried a few things, but nothing came through for me.
This program puts the domain profiles in /users/local/DOMAIN_NAME/USER_NAME.
I tried just copying that profile to where it would be if OS X would have created it, but it didn't work.
If I knew more about programming, I would just look at the source code of LikeWise and make my own little profile utility. I know the profiles can be transferred, but I sure don't know how.
Thanks!
Here is what I did that seemed to work for me. I haven't noticed any problems yet.
I had the domain user login and create the mobileMe account. Then I log in as the local admin and do the following:
sudo cp -r /Users/username/ /Users/networkusername/
sudo chmod –RN /Users/networkusername
sudo chown –R networkusername /Users/networkusername
Then login as the domain user. Everything seemed to work for me. It prompted me about the keychain password since it was different between the users. I then changed it. The only icon on the desktop that I had to do anything with was my Windows 7 VM on Parallels. It prompted me to fix the alias, so I found the proper location in the documents folder. Other than that I haven't noticed any problems. All my aliases, dock, programs, ect seem to be fine.
I had the domain user login and create the mobileMe account. Then I log in as the local admin and do the following:
sudo cp -r /Users/username/ /Users/networkusername/
sudo chmod –RN /Users/networkusername
sudo chown –R networkusername /Users/networkusername
Then login as the domain user. Everything seemed to work for me. It prompted me about the keychain password since it was different between the users. I then changed it. The only icon on the desktop that I had to do anything with was my Windows 7 VM on Parallels. It prompted me to fix the alias, so I found the proper location in the documents folder. Other than that I haven't noticed any problems. All my aliases, dock, programs, ect seem to be fine.
Last edited:
