After migrating user accounts with the option 'translate terminal server profiles', the users get a (NETIQKB44526)

  • 7744526
  • 02-Feb-2007
  • 13-Feb-2008


Domain Migration Administrator 7.x

After migrating user accounts with the option 'translate terminal server profiles', the users get a default profile when logging on to the terminal server with their source account.

For a terminal server profile to be accessed, the folder where the profile resides must be 'owned' by either the 'administrators' group or the the account the user is logging on with. Because the 'owner' value is not a multi-valued property, DMA does a 'Replace' on the 'Owner' when it translates security. If the original owner was the source user account, this results in the target user account being the new 'owner' of the profile folders, which prevents further access by the source account. This causes the default profile to load when the user logs on with his source domain account. 


There are two possible solutions:

  1. Set the profile folder owner to 'administrators'.
  2. Do NOT select the option 'translate terminal server profiles' in the migration settings wizard. Instead, run the 'remoteprof' utility after the user accounts have been migrated. 

NetIQ recommends using the 'remoteprof' utility for translating Terminal Server Profiles or Roaming Profiles in cases where the users need to continue accessing these profiles with their source user accounts.


For more information about the 'remoteprof' utility, see the following NetIQ KB article:

'What is the remoteprof utility used for and where can I find documentation on it?'


Additional Information

Formerly known as NETIQKB44526