Migrating a Windows 2000 or XP workstation to the CAMPUS domain:

Action
  • Steps
Done
Obtain local account information
  • Which local account is most commonly used?
 
  • What is the path to the local account's profile (use "set" command to find "%USERPROFILE%" variable
 
Apply latest Support Pack, apply all Windows "Critical Updates"
  • XP to Support Pack 2, 2000 to Support Pack 4
 
Have user perform NetID password reset (not required if pw changed since 6/2004)  
Backup user profile
  • Perform a disk cleanup... purge all temporary internet files in Mozilla/Firefox and IE.  Empty mail trashcans on any POP mail accounts.
  • Copy %USERPROFILE% to a separate location on the local HD (may be able to eliminate this step in the future...)
 
Perform domain join    
Add domain user account to local administrators group (if desired)    
Add domain user to ACL on local profile directory (NTFS only)    
Add the domain user to the ACL on the HKey User hive for the local user:
(Note: This step assumes that you are logged in as the local user whose local profile you wish to convert to a domain profile) 
  • Run REGEDIT (Regedt32 on Windows 2000)
 
  • Navigate to HKey_Users\<Local user SID>, right-click->select "permissions", add the domain user to the ACL with "full control" (On Windows 2000, Select the "Security" menu, permissions item)
 
  • Navigate to HKey_Users\<Local user SID>_classes, right-click->select "permissions", add the domain user to the ACL with "full control" (On Windows 2000, Select the "Security" menu, permissions item)
 
reboot    
Have user login with domain credentials (select "CAMPUS" from the domain drop-down list)     
Take ownership of local profile directory/all subdirs and files
  • Find the profile directory under c:\documents and settings, right click the directory, select properties.
  • Select the security tab, click advanced.
  • Select the owner tab
  • From the list of available users, select the network account of the currently logged-in user.  Select replace owner on subcontainers and objects.  Click Ok.  (This may take a few minutes to complete.  Be patient!)
 
Change profile path attribute in the registry for the domain user
  • Path to key is: HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\ProfileList\<SID>, where <SID> is the Security Identifier of the domain user account.  Usually there are few enough of these that you can just scroll through the SID's until you have found the one pointing to the current USERPROFILE of the domain user.
 
  • Change the path to be the same as the original local account's %USERPROFILE% value.
 
Log out, have user log in with domain credentials