What are the requirements, situations, and common errors for translating and migrating a user profil (NETIQKB893)

  • 7700893
  • 02-Feb-2007
  • 08-Aug-2007

Resolution

goal
What are the requirements, situations, and common errors for translating and migrating a user profile with Domain Migration Administrator (DMA)?

goal
What are the requirements to translate and migrate a user profile with Domain Migration Administrator (DMA)?

goal
When can I translate and migrate a user profile with Domain Migration Administrator (DMA)?

fact
Domain Migration Administrator 7.x

symptom
Error: 'Error message rc=5' (Access is denied.)

symptom
A new profile is created when the user logs on to the target computer.

fix
Warning:   You must translate and migrate the user profile before the user account logs on to the target. Otherwise, a new profile is created for the target account and the original source profile is only available to the source account.

fix
Use Domain Migration Administrator (DMA) user profile translation and migration to give migrated users continued access to their pre-migration profiles.

Translation and Migration Requirements

User profile translation is available through the Translating Security option in a project or through the Translating Security Global Wizard.  For a successful migration, the following requirements must be met:

  • The logon account used to translate security with DMA must have Administrative access to each computer from which user profiles will be translated and migrated.
  • The computer where the profile resides must be powered on and the user must not be logged on to the computer.
  • The computer where the profile resides must be running Microsoft Windows NT 4 workstation, Windows 2000/XP Professional, Server, or later.

Translation and Migration Errors

If you do not satisfy the translation and migration requirements, you may encounter the following errors

  • If the DMA log on account does not have Administrative rights on the computer, you may receive Error message rc=5, which means access is denied.
  • If a user is logged on to the computer with his profile while you are trying to translate and migrate his profile, the DCTlog.txt file, which is in the Temp directory, will contain the following entry:

Translating user profile for userone

2000-11-16 09:21:32-S30282: Failed to load profile C:\Documents and Settings\userone\NTUser.DAT into registry, rc=32 The process cannot access the file because it is being used by another process.
2000-11-16 09:21:32-S30945: Error enumerating the profile list entries, rc=32 The process cannot access the file because it is being used by another process.
2000-11-16 09:21:33-------Account Detail---------

  • If a new profile is created when the user logs onto the computer, this usually indicates that the user logged on to the computer with the Target account before security translation was performed on the source user profile. To resolve this, delete the newly created profile and translate security on the source profile as indicated below:
    1. Log in to the computer with an account that has Administrative rights; do not use the account of the profile you are attempting to recover.
    2. Right-click My Computer and select Properties.
    3. Select the User Profile tab.
    4. There should be two profiles: Target_Domain\Userx and Source_Domain\Userx.  Delete the Target_Domain\Userx profile.
    5. Log out, but leave the computer on.
    6. Translate security again for the source user profile.

Situations

If you have an accounts domain where the users reside and a resource domain where the computers reside, do the following:

  1. Migrate users and groups from the accounts domain.
  2. Translate security on the computers to be migrated.
  3. Migrate the computers from the resource domain.

If you want to translate and migrate desktop computers, after you migrate users and computers, do the following: 

  1. Leave both source and target user accounts open (do not disable either).
  2. Specify the accounts domain as the source
  3. Select the desktop computers in the target on which you want the profiles translated.


note

Please refer to the following NetIQ Knowledge Base article for information about migrating Windows XP computers:

NETIQKB9243 - Security is not translated on the user profile when migrating Microsoft Windows XP computers with Domain Migration Administrator (DMA).
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB9243



note

Please refer to the following NetIQ Knowledge Base article for an explanation of best practices for migrating computers:

NETIQKB1434  - What is the best practice for logon account permissions necessary to successfully migrate computers?
https://www.netiq.com/kb/esupport/consumer/esupport.asp?id=NETIQKB1434



Additional Information

Formerly known as NETIQKB893